ancient-apartment-23316
08/11/2022, 12:52 PMTo do so, you must update the datahub-frontend docker.env file with the values received from your identity provider:the thing is I have installed the datahub on kubernetes (EKS) using helm and AWS managed services I can’t edit the docker.env file Instead, I manually edit k8s deployment.apps/datahub-datahub-frontend and put the envs (AUTH_OIDC_ENABLED, AUTH_OIDC_CLIENT_ID, etc.) there. The new frontend pod is ready and contains all the envs. But redirection to okta does not work, I still have access to the datahab, w/o okta
incalculable-ocean-74010
08/11/2022, 12:56 PMincalculable-ocean-74010
08/11/2022, 12:56 PMincalculable-ocean-74010
08/11/2022, 12:56 PMancient-apartment-23316
08/11/2022, 1:04 PMDo not modify the pod directlyI’m didn’t modify the pod manually, but i’v edited the deployment then kubernetes re-created the replica set and the pod. Here is the new pod, it contains the envs:
incalculable-ocean-74010
08/11/2022, 1:18 PMincalculable-ocean-74010
08/11/2022, 1:19 PMincalculable-ocean-74010
08/11/2022, 1:19 PMancient-apartment-23316
08/11/2022, 1:33 PMInstead update the deployment via helm so you have a consistent deployment every timeok, i’ll do it
The discovery uri is wrong, it should be the url for the oidc providerWhere I can find the proper uri for okta?
Also, obfuscate the secret information when sharing dataIt’s already obfuscated 🙂
incalculable-ocean-74010
08/11/2022, 1:34 PMThe discovery uri is wrong, it should be the url for the oidc providerWhere I can find the proper uri for okta? It’s in the documentation…. https://datahubproject.io/docs/authentication/guides/sso/configure-oidc-react-okta#3-obtain-discovery-uri
ancient-apartment-23316
08/11/2022, 1:37 PMancient-apartment-23316
08/11/2022, 1:39 PM<https://your-okta-domain.com/.well-known/openid-configuration>
sorry, I’v miss this thing - your-okta-domainancient-apartment-23316
08/11/2022, 3:28 PMAccess denied. The OIDC service responded with 'Access denied'. It seems that you don't have access to this application yet. Please apply for access.
If you already have been assigned this application, it may be so that your OIDC request is still in action. Error details: 'access_denied':'User is not assigned to the client application.'
ancient-apartment-23316
08/11/2022, 3:30 PMancient-apartment-23316
08/11/2022, 3:31 PMincalculable-ocean-74010
08/11/2022, 3:32 PMcuddly-kite-88848
10/19/2022, 6:13 PM