goauthentik / helm

Helm chart for authentik
https://artifacthub.io/packages/search?org=goauthentik&sort=relevance&page=1
GNU General Public License v3.0
78 stars 40 forks source link

Can't generate kubeconfig file for remote cluster integration using the authentik-remote-cluster helmchart #269

Open CookieDude24 opened 2 months ago

CookieDude24 commented 2 months ago

Describe the bug The helm chart doesn't create the nessescary secret so it defaults to "authentik-authentik-remote-cluster" secret which also doesn't exist. Thus I can't fill in the variables in the kubeconfig file that the helm chart outputs.

To Reproduce Steps to reproduce the behavior:

  1. Create K8s Cluster with k3s v1.30.0+k3s1
  2. Install authentik-remote-cluster helmchart using this command: helm install authentik authentik/authentik-remote-cluster
  3. After succesful helmchart installlation execute following commands: KUBE_API=$(kubectl config view --minify --output jsonpath="{.clusters[*].cluster.server}") NAMESPACE=default SECRET_NAME=$(kubectl get serviceaccount authentik-authentik-remote-cluster -o jsonpath='{.secrets[0].name}' 2>/dev/null || echo -n "authentik-authentik-remote-cluster") KUBE_CA=$(kubectl -n $NAMESPACE get secret/$SECRET_NAME -o jsonpath='{.data.ca\.crt}') KUBE_TOKEN=$(kubectl -n $NAMESPACE get secret/$SECRET_NAME -o jsonpath='{.data.token}' | base64 --decode) The last two throw the following error: Error from server (NotFound): secrets "authentik-authentik-remote-cluster" not found

Expected behavior The secret/serviceaccount being generated.

Screenshots Note the non-existance of the required secret and the service account.

grafik grafik

Logs output of helm status authentik

grafik

Version and Deployment (please complete the following information):

CookieDude24 commented 2 months ago

I fixed the problem by using ArgoCD to install the helmchart. Though the name of the generated secret is authentik-remote-clusters. As a sanity check I tried the installation with helm again, this time explicitly setting the newest version using the option --version 2.0.0, but it still didn't work.