Hi team & happy new year 🎅 ☃️ I’m adding my DH cluster(k8s) to Okta(OIDC) Regarding this - is this need to be configured in

datahub-frontend-xxx

pod? If so, I can’t find the path

docker/datahub-frontend/env/docker.env

Pls. assist 🙂

The env variables to set in frontend can be set in values.yaml if you use helm. Else, insert it as a configmap into the FE deployment

@better-orange-49102 hi

AUTH_OIDC_ENABLED=true
AUTH_OIDC_CLIENT_ID=your-client-id
AUTH_OIDC_CLIENT_SECRET=your-client-secret
AUTH_OIDC_DISCOVERY_URI=<https://your-okta-domain.com/.well-known/openid-configuration>
AUTH_OIDC_BASE_URL=your-datahub-url
AUTH_OIDC_SCOPE="openid profile email groups"

Where these should place in the datahub-frontend configuration?

i parked those env under extraEnvs in datahub-frontend, something like this in values.yaml

datahub-frontend:
  enabled: true
  image:
    ...
  extraEnvs:
    - name: AUTH_OIDC_DISCOVERY_URL
      value: xxxx
    - name: AUTH_OIDC_CLIENT_SECRET
      valueFrom:
        secretKeyRef:
          name: secret-name
          key: key-of-secret
    - name: AUTH_OIDC_CLIENT_ID
....

@better-orange-49102 I’ve tried the following, but it’s not working:

datahub-frontend:
    enabled: true
    auth:
      enabled: true
      backend: oidc
      oidc:
        AUTH_OIDC_ENABLED=true
        AUTH_OIDC_CLIENT_ID=xxxxxxxxx
        AUTH_OIDC_CLIENT_SECRET=xxxxxxxxxxxxxxxx
        AUTH_OIDC_DISCOVERY_URI=<https://datahub-stg-is.jfrog.org/.well-known/openid-configuration>
        AUTH_OIDC_BASE_URL=<http://datahub-stg-is.jfrog.org|datahub-stg-is.jfrog.org>
        #AUTH_OIDC_SCOPE="openid profile email groups"

CC: @bulky-electrician-72362 🙂

hmm mine is for keycloak and im on 0.8.45 so im not sure if the charts have changed..

Can you share the way you deploy it @better-orange-49102?

as mentioned above^, I can't share the file cos its inside intranet

Understood.. Did I configured it correctly?

the end state, if correctly configured, is that if you exec into the container, all those OIDC env variables should be present in the container

Which pod & what's the path?

frontend

@better-orange-49102 I used this

How... is the suggested values.yaml from another product supposed to work with the datahub helm chart

It’s an authentication configuration…. Do you have a reference for me @better-orange-49102? The doc refer to adding the configmap or updating the docker img