Hi all! I am deploying DataHub on GKE and I want t...
# getting-starteda
agreeable-hamburger-38305
10/19/2021, 3:57 AMHi all! I am deploying DataHub on GKE and I want to put it behind GCP IAP. If I then also set up Google Authentication like the DataHub Doc detailed, the user would have to log in twice. So I want to skip OAuth, and simply use the JWT token added by IAP to identify individual users.
I am wondering if DataHub has something that works with IAP, maybe similar to this https://github.com/GoogleCloudPlatform/jupyterhub-gcp-proxies-authenticator/blob/c[…]6b70e9005c52/gcpproxiesauthenticator/gcpproxiesauthenticator.py
b
big-carpet-38439
10/19/2021, 8:13 PMHi @agreeable-hamburger-38305. This is very interesting. I think it's definitely possible though today there's not a clear place to plug this in. We are currently rethinking how authentication works with the hopes of making it much more general purpose and pluggable. Once we implement that, we will be able to provide better guidance here 🙂
big-carpet-38439
10/20/2021, 9:48 PMYes!!
big-carpet-38439
10/20/2021, 9:48 PMBut the downside is...
big-carpet-38439
10/20/2021, 9:48 PMYou will all be sharing a single account
big-carpet-38439
10/20/2021, 9:48 PMIf that's alright with you, then you can easily disable authentication
big-carpet-38439
10/20/2021, 9:48 PM(for now)
a
agreeable-hamburger-38305
10/20/2021, 9:56 PMGreat! Care to give me some pointers on how to do that?
b
big-carpet-38439
10/21/2021, 2:42 AMYep -- you can simply set the following env variable in
datahub-frontend Copy code
AUTH_JAAS_ENABLED=false
AUTH_OIDC_ENABLED=falsea
agreeable-hamburger-38305
10/21/2021, 3:53 AMThanks! @big-carpet-38439 thankyou
agreeable-hamburger-38305
10/21/2021, 5:59 PMHi @big-carpet-38439 Is this the file? docker/datahub-frontend/env/docker.env I set the two env variables in there and restarted the docker containers but it doesnt look like its working
b
big-carpet-38439
10/21/2021, 5:59 PMHow are you deploying the docker containers? Ie. which command?
a
agreeable-hamburger-38305
10/21/2021, 6:01 PMdatahub docker quickstartb
big-carpet-38439
10/21/2021, 6:01 PMAh I see!
big-carpet-38439
10/21/2021, 6:01 PMSo that uses a set of default environment variables, and won't catch the changes you've made
big-carpet-38439
10/21/2021, 6:02 PMPlease put those containers down and try this from the root directory of datahub
big-carpet-38439
10/21/2021, 6:02 PM Copy code
cd docker && ./quickstart.sha
agreeable-hamburger-38305
10/21/2021, 6:11 PMI am still getting the same results
agreeable-hamburger-38305
10/22/2021, 12:14 AM@big-carpet-38439 I ran
datahub docker nukecd docker && ./quick start.shb
big-carpet-38439
10/22/2021, 12:16 AMOops! I think we updated the quickstart script to also use default variables some time recently. Can you try
Copy code
docker-compose -p datahub \
-f docker-compose.yml \
-f docker-compose.override.yml \
$CONSUMERS_COMPOSE $MONITORING_COMPOSE upa
agreeable-hamburger-38305
10/22/2021, 6:27 PMThat worked!!!
b
big-carpet-38439
10/22/2021, 7:43 PMyay!!!
l
little-megabyte-1074
12/01/2021, 12:44 AM
Hi folks! I’ve created a feature request for this in our new portal - https://feature-requests.datahubproject.io/b/User-Experience/p/user-authentication-integration-with-gcp-iap