Skip to content

documentation fix in case of external IdP and Kubeflow with self-signed certs #3244

@giosdas

Description

@giosdas

Validation Checklist

  • I confirm that this is a Kubeflow-related issue.
  • I am reporting this in the appropriate repository.
  • I have followed the Kubeflow installation guidelines.
  • The issue report is detailed and includes version numbers where applicable.
  • I have considered adding my company to the adopters page to support Kubeflow and help the community, since I expect help from the community for my issue (see 1. and 2.).
  • This issue pertains to Kubeflow development.
  • I am available to work on this issue.
  • You can join the CNCF Slack and access our meetings at the Kubeflow Community website. Our channel on the CNCF Slack is here #kubeflow-platform.

Version

1.9

Detailed Description

Hello,

I have found an issue on this readme of v1.10: https://github.com/kubeflow/manifests/blob/v1.10.0/common/dex/README.md

at line 80

insecure: false
the parameter is wrong, it should be insecureSkipVerify

In case of an installation with self signed certificate (ex: test environment with keycloak or other idp):

  • the insecureSkipVerify need to to be set to true
  • also need to add this code jwksUri: http://dex.auth.svc.cluster.local:5556/dex/keys after issuer at line 169:
    - issuer: $DEX_ISSUER

Otherwise the login with other IdP doesn't work.

Thanks
Regards

Steps to Reproduce

Try to configure external IdP that has selsigned certificates

Screenshots or Videos (Optional)

No response

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions