I'm trying to apply authentication on the gms service following this guide(https://datahubproject.io/docs/introducing-metadata-service-authentication/). I want to apply the changes with helm. My values.yaml looks like

datahub-frontend:
  ingress:
    enabled: false 
    annotations:
      <http://kubernetes.io/ingress.class|kubernetes.io/ingress.class>: traefik
    hosts:  
      - host : "url"
        paths: ['/']

  datahub:
    metadata_service_authentication:
      enabled: true
  
datahub-gms:
  datahub:
    metadata_service_authentication:
      enabled: true

global:
    metadata_service_authentication:
      enabled: true
      systemClientId: "__datahub_system"
      systemClientSecret:
        secretRef: "datahub-auth-secrets"
        secretKey: "token_service_signing_key"
      tokenService:
        signingKey:
          secretRef: "datahub-auth-secrets"
          secretKey: "token_service_signing_key"
      # Set to false if you'd like to provide your own auth secrets
      provisionSecrets: true

Should I enable metadata_service_authentication in both front-end, gms and global? And where can I find the

systemClientId

? I tried the setup without the global tag and this didn't work. So i assume the

metadata_service_authentication

should also be enabled in global?

Yes, please enable it in global. It should override the appropriate configurations on gms & frontend so no need to enable metadata_service_authentication in those services manually.