Hello together after some local test with docker we have dep DataHub #all-things-deployment

Hello together, after some local test with docker...

calm-morning-92759

10/28/2021, 3:28 PM

Hello together, after some local test with docker we have deployed datahub on kubernetes using the existing helm charts. This works great. Now we want to enable Oauth consent screen with google. Therefore we used this tutorial. https://github.com/linkedin/datahub/blob/master/docs/how/auth/sso/configure-oidc-react-google.md I have now bring these env variables to the frontend pod / deployment.

Copy code

AUTH_OIDC_ENABLED=true
AUTH_OIDC_CLIENT_ID=your-client-id
AUTH_OIDC_CLIENT_SECRET=your-client-secret
AUTH_OIDC_DISCOVERY_URI=<https://accounts.google.com/.well-known/openid-configuration>
AUTH_OIDC_BASE_URL=your-datahub-url
AUTH_OIDC_SCOPE="openid profile email"
AUTH_OIDC_USER_NAME_CLAIM=email
AUTH_OIDC_USER_NAME_CLAIM_REGEX=([^@]+)

Anyway to change the deployment config manually seems not the right way. I am wondering what could be the best way to combine custom config with helm charts. It seems that it is not possible to add the values in the values.yaml file. Hope, that someone can share his experience...

big-carpet-38439

10/28/2021, 4:17 PM

Hey hey! Thanks for the question.

big-carpet-38439

10/28/2021, 4:17 PM

We use

extraEnvs

on the datahub-frontend pod to configure OIDC in K8s

big-carpet-38439

10/28/2021, 4:18 PM

Copy code

extraEnvs:
      - name: AUTH_OIDC_ENABLED
        value: "true"
      - name: AUTH_OIDC_CLIENT_ID
        value: <our-id>
      - name: AUTH_OIDC_CLIENT_SECRET
        valueFrom:
          secretKeyRef:
            name: oidc-secret # we have a K8s secret for this!
            key: oidc-secret
      - name: AUTH_OIDC_DISCOVERY_URI
        value: <our-discovery-uri>
      - name: AUTH_OIDC_BASE_URL
        value: <our-base-uri-where-datahub-lives>
      - name: AUTH_OIDC_SCOPE
        value: "openid email profile"
      - name: AUTH_OIDC_USER_NAME_CLAIM
        value: email

lemon-receptionist-90470

11/04/2021, 11:38 AM

@gifted-queen-61023

proud-lamp-13920

07/19/2022, 6:43 AM

@big-carpet-38439 Hi I'm not familiar with kubernetes, so i'm at a loss. Could you help me? I have a two question. First, many yaml file exist In GKE. Which yaml file do i need to edit in GKE menu? service in "Services and Ingress" or deployment in "Workloads"? Second, where should i add "extraEnvs" in yaml file? Thanks

Open in Slack

Previous Next