helpful-afternoon-47745
11/06/2024, 10:28 PMflyte-core
section of https://docs.flyte.org/en/latest/deployment/configuration/auth_setup.html#apply-oidc-configuration
authentication seems enabled, but when i load the initial page i see a CORS error in the network panel when calling https://accounts.google.com/o/oauth2/v2/auth?client_id=.... in particular, the payload has *redirect_uri:* <https://localhost:30081/callback>
which seems like it maybe the problem, since i expect it to be https://<your-deployment-URL>/callback
jolly-florist-66728
11/06/2024, 10:28 PMhelpful-afternoon-47745
11/06/2024, 10:30 PMvalues-gcp-core.yaml
i have:
configmap:
adminServer:
server:
httpPort: 8088
grpcPort: 8089
security:
secure: false
useAuth: true
allowCors: true
allowedOrigins:
- "<my-deployment-URL>"
allowedHeaders:
- "Content-Type"
- "flyte-authorization"
auth:
appAuth:
thirdPartyConfig:
flyteClient:
clientId: flytectl
redirectUri: <my-deployment-URL>/callback
i've also confirmed that my authorized redirect URI's are correct on the google side.jolly-florist-66728
11/06/2024, 10:30 PMredirectUri
in your values-gcp-core.yaml
is correctly set to your deployment URL. Replace <my-deployment-URL>/callback
with https://<your-deployment-URL>/callback
. Also, verify that the allowedOrigins
list includes your deployment URL without HTML encoding.
If the issue persists, check the CORS settings in your Google OAuth client configuration to ensure they match the deployment URL.
Would you like more detailed guidance on updating these configurations?
Sources:
- https://discuss.flyte.org/t/8579436/hi-community-i-tried-to-integrate-self-hosted-gitlab-as-an-e/
- https://github.com/flyteorg/flyte/issues/4955 👍 0 button 👎 0 button 💡 Hint: Mention @runllm in the thread for followups.helpful-afternoon-47745
11/06/2024, 10:33 PMjolly-florist-66728
11/06/2024, 10:33 PMredirectUri
: Ensure the redirectUri
in your values-gcp-core.yaml
is set to https://<your-deployment-URL>/callback
without any HTML encoding.
2. Allowed Origins: In the allowedOrigins
section, ensure your deployment URL is correctly specified and matches the domain from which requests are being made.
3. Google OAuth Configuration: Double-check that the authorized redirect URIs in your Google OAuth client settings exactly match the redirectUri
specified in your Flyte configuration.
4. FlyteAdmin Config: According to Flyte documentation, ensure that the FlyteAdmin config allows CORS from the FlyteConsole domain.
If these steps are correctly followed and the issue persists, consider checking network logs for any discrepancies in the request headers or additional CORS-related errors.
Would you like more detailed guidance on any specific step?
Sources:
- Flyte Documentation
- Flyte GitHub Issue 👍 0 button 👎 0 button 💡 Hint: Mention @runllm in the thread for followups.