hey, i am tying to connect oidc using azure and ke...
# troubleshoot
n
hey, i am tying to connect oidc using azure and keycloak, after setting up everything i am redirected to the login page in azure finishing successfully ( according to azure) but then when redirecting back to my local frontend it looks like it fails and retry several times , and in the frontend logs i see
Copy code
2023-03-08 13:37:28,465 [application-akka.actor.default-dispatcher-13] ERROR o.p.core.engine.DefaultCallbackLogic - Unable to renew the session. The session store may not support this feature
1
a
Hi @nice-river-27843 what’s your version and deployment method
n
hey, deployment method is k8s + we are using postgres. we took the latest from git ( v0.10.0) . we read previous posts but nothing helped
when i am running with the docker quickstart and the same OIDC configurations everything works as expected, but not using helm and k8s
b
just curious if your keycloak client callback settings was updated between quickstart and helm deployment?
Copy code
2023-03-08 13:37:28,465 [application-akka.actor.default-dispatcher-13] ERROR o.p.core.engine.DefaultCallbackLogic - Unable to renew the session. The session store may not support this feature
I don't think this line is the cause of the issue though
n
hey @better-orange-49102, in both cases it redirects to localhost:9092 ( didn’t change anything there ). i am running on local k8s cluster so it doesn’t need to be changed as far as i understand. please correct me if i am wrong.
b
other than port 9002, I can't think of anything else to check, unfortunately. (you're running frontend in port 9092?) Also im not using local k8s cluster
n
sorry 9002 🙂
a
The helm deployment process has some signficant changes from docker- have you reviewed the docs here? https://datahubproject.io/docs/deploy/kubernetes
n
yeah covered everything here, actually it works as expected if i am working without OIDC auth.
a
Let’s see if @big-carpet-38439 can help you out here!
b
can we get the rest of the configs you are using?
redirecting to 9002 seems okay right?
n
hey, yeah redirecting works when OIDC disabled