Open rlaflamme opened 4 months ago
@rlaflamme did you create corresponding ClusterRoleBinding also?
same here. Any progress from your side? @rlaflamme
I finally managed it outside the app by securing the endpoint using an api Gateway (Kong) with their oidc plugin.
I did the same with an open source solution using apisix gateway and their oidc plugin.
Robert Laflamme
3926419 Canada inc. 73 rue Richard Pointe-Aux-Trembles, QC H1A 4C7 (514) 212-3844
Le mer. 4 sept. 2024 à 05:02, AllenYin @.***> a écrit :
same here. Any progress from your side? @rlaflamme https://github.com/rlaflamme
— Reply to this email directly, view it on GitHub https://github.com/weaveworks/weave-gitops/issues/4202#issuecomment-2328308671, or unsubscribe https://github.com/notifications/unsubscribe-auth/AF3VXR7T623VL5WFA6SJMSDZU3EDLAVCNFSM6AAAAABGKGGVTGVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDGMRYGMYDQNRXGE . You are receiving this because you were mentioned.Message ID: @.***>
OIDC integration with Azure fails due to missing 'groups' scope
Environment
Weave-Gitops Version 0.38.0 Flux Version 2.2.3 Kubernetes versionv 1.27.10-eks-508b6b3 To Reproduce Steps to reproduce the behavior:
Create a new App Registration in Azure Active Directory Configure oidc in helm chart Deploy Attempt to login via OIDC
No data ...
Still having issue with the no data message when usinc ODCI and AzureAD
I read and apply recomendations from this thread [(https://github.com/weaveworks/weave-gitops/issues/2507)]
Group is set in optional claims and I can see them in the token. I can see the logged username and its groups in the JWT token.
Another observation: I had to impersonate both the user AND it's group. Otherwhise I get the message
Content of oidc-auth secret:
I can see the data using the "admin" user (basic authentifcation, no OIDC)
Anyone have any ideas how to solve this issue once for all ?
Thank you !
Regards
Robert