A complete solution for open data platforms, enterprise data catalogs, data lakes and data management. Open source, mature, fully-featured and production ready.

DataHub

Good morning all, I'm currently working on setting up an sso with our keycloak installment. I have datahub redirecting to keycloak to sign in, but once I sign in it will just cycle through loading the page. On the backend, I'm getting an unsupported SSL message error (I'll provide screenshots of the error soon). I've looked at the documentation but I haven't seemed to be able to find an answer to my problem. Any help or insight is greatly appreciated! Also, if this isn't the correct spot for this question, let me know and I'll post in the correct channel.

Hi Justin! Can you please provide some logs from your `datahub-frontend` pod?

SSL_Error.jpg

This screenshot is showing an SSL error message that just generates a lot of the same message.

Kafka_Authentication_Error.jpg

This is a kafka authentication error, but we don't really use Kafka, so I'm a little confused why I'm getting this message.

OIDC_Settings.jpg

And these are my OIDC settings. I have it able to get to Keycloak, but when it logs me in, it generates all of those SSL messages. My biggest issues is I'm not sure where to set the certificates and what certificates I would need to use (ie, .p12, .jks, .pem, etc)

Finally, hello John! Thanks for reaching out, and I apologize it's taken me a bit to get back. Have been busy on my end :disappointed:

Good morning John! Did these logs help provide any insight to my problem? Or do you need screen shots of anything else? Hope you're having a great week!

Also, if there's some documentation that I may have missed that will explain setting up SSL for Datahub, that would work too. Mainly just looking for direction on setting up SSL and completing the OIDC setup with keycloak. The only SSL settings I've found are kafka.ssl.protocol stuff within the application.conf file on the datahub-frontend pod, but we don't really use Kafka. I thank you for your time and efforts on this, John!

Hi <@U01GCJKA8P9>, following up here. Thank you!

Hello <@U03BEML16LB> <@U01GCJKA8P9>. We are still trying to get datahub connected with keycloak. We are not receiving the following error. Can someone please assist?

WARN o.apache.kafka.clients.NetworkClient - [Producer clientId=datahub-frontend] Connection to node -1 (broker/xxx.xx.x.x:29092) terminated during authentication. This may happen due to any of the following reasons: (1) Authentication failed due to invalid credentials with brokers older than 1.0.0, (2) Firewall blocking Kafka TLS traffic (eg it may only allow HTTPS traffic), (3) Transient network issue. constantly