Hi, I am using the `flyte-binary` helm chart to setup external auth server. Unfortunately, not being...

quiet-grass-7164

05/31/2023, 4:01 PM

Hi, I am using the

flyte-binary

helm chart to setup external auth server. Unfortunately, not being successfully, the below config is not getting propagated to the configmap. Setting

enableAuthServer=false

is having no effect. Has anyone successfully used

flyte-binary

helm chart to setup an external server?

Copy code

configuration:
  auth:
    enabled: true
    enableAuthServer: false
    oidc:
      baseUrl: "okta-server"
      clientId: "my_id"
      clientSecret: "my_secret-"
    internal:
      # propeller
      clientId: "my_id"
      clientSecret: "my_secret-"
      clientSecretHash: "hash
    flyteClient:
      clientId: my_id"
      redirectUri: <http://localhost:53593/callback>
      scopes:
        - all
        - offline
    authorizedUris:
      - https://${app_name}.${env}.<http://cloud.com|cloud.com>
      - <http://flyteadmin:80>
      - <http://flyteadmin.flyte.svc.cluster.local:80>

freezing-boots-56761

05/31/2023, 4:47 PM

enableAuthServer: false

just disables the auth server in flyteadmin: https://github.com/flyteorg/flyte/blob/baba9bd59008d640c10344906c11473b1cfb166e/charts/flyte-binary/templates/configmap.yaml#L128 are you perhaps missing some configuration?

freezing-boots-56761

05/31/2023, 4:50 PM

see: https://github.com/flyteorg/flyteadmin/blob/3379031b05bec09df6b7bb1bd99d499cf900b268/auth/config/config.go#L162 https://github.com/flyteorg/flyteadmin/blob/3379031b05bec09df6b7bb1bd99d499cf900b268/auth/config/config.go#L198 https://github.com/flyteorg/flyteadmin/blob/3379031b05bec09df6b7bb1bd99d499cf900b268/auth/config/config.go#L187

freezing-boots-56761

05/31/2023, 4:51 PM

you can add the external auth server under

configuration.inline

quiet-grass-7164

05/31/2023, 5:19 PM

Thanks @freezing-boots-56761. I will add it in the inline and keep you posted.

👍 1

quiet-grass-7164

05/31/2023, 6:40 PM

@freezing-boots-56761 I have added the following block in addition the one above. Is this correct? I found an issue reported here. Would be great if you can point to me of an working example. Thanks https://github.com/flyteorg/flyte/issues/3660

Copy code

configuration:  
 inline:
    authServerType: External
    externalAuthServer:
      baseUrl: "<https://xxx/oauth2/aus9pvuqy0Xc2VzSA5d7>"

freezing-boots-56761

05/31/2023, 7:32 PM

the flyte-binary helm chart templates the core configuration but you can merge arbitrary config in from configuration.inline into the final configuration that flyte-binary will use. i don’t have an example of external auth server unfortunately. @thankful-minister-83577 @high-accountant-32689 do we have docs for this?

freezing-boots-56761

05/31/2023, 7:34 PM

@quiet-grass-7164: looks like you need to nest that block under auth.appAuth. See: https://github.com/flyteorg/flyte/blob/baba9bd59008d640c10344906c11473b1cfb166e/charts/flyte-binary/templates/configmap.yaml#L126 for structure.

freezing-boots-56761

05/31/2023, 7:52 PM

something like:

Copy code

configuration:  
  inline:
    auth:
      appAuth:
        authServerType: External
        externalAuthServer:
          baseUrl: "<https://xxx/oauth2/aus9pvuqy0Xc2VzSA5d7>"

👍 1

quiet-grass-7164

05/31/2023, 8:22 PM

Thanks @freezing-boots-56761. I will test it out.

152 Views

Open in Slack

Previous Next

Flyte

Flyte enables production-grade orchestration for machine learning workflows and data processing created to accelerate local workflows to production.