Page Comparison

You can use Kloudfuse UI through your google account authentication. To enable Google OAuth2, you need to register a new application with Google.

If upgrading Kloudfuse release 1.3.4 and earlier, please make sure to follow post upgrade steps.

Create Google OAuth2 Keys

1. Go to the Credentials page.

2. Click Create credentials > OAuth client ID.

3. Select the Web application application type.

4. Enter Name (e.g. Kloudfuse)

5. Enter URL of the kloudfuse installation in the Authorized JavaScript Origins. Example: kloudfuse.yourcompany.com

6. Click Create

7. Copy the Client ID and Client Secret from the ‘OAuth Client’ modal. It is required for further steps.

Enable Google Auth in Kloudfuse

...

Option 1. Using Client ID & Secret

• In your custom values.yaml, add google client ID and secret:

...

 kfuse-auth:
   oauth2-proxy:
   

...

...

...

config:
  

...

...

...

...

clientID: 

...

"REPLACE_CLIENT_ID"
    

...

...

...

1. Replace/add Client ID, Client Secret and google domain - you will need to do base64 encode the Client ID, Client Secret and the google domain. You can also use the admin-user and admin-password fields in the kfuse-credentials secret to change the admin user and password from their default values. These values need to be base64 encoded.

2. To encode the above values in base64 you can use the following command:

   Code Block
   echo -n <value to be encoded> | base64

3. Code Block
   kubectl apply -f kfuse-credentials.yaml -n kfuse

In the custom_values.yaml file that you used for kfuse helm chart installation, add the following lines:

...

clientSecret: "REPLACE_CLIENT_SECRET"

Option 2. Using a Kubernetes secrets.

• Create 2 kubernetes secrets.

  • Create secret called kfuse-auth-users as mentioned here.

  • Create secret called kfuse-auth. Use these steps to generate cookie secret.

apiVersion: v1
data:
  client-id: <base 64 encoded google client id>
  client-secret: <base 64 encoded google client secret>
  cookie-secret: <base 64 encoded random value>
kind: Secret
metadata:
   name: kfuse-auth
type: Opaque

• and refer it from your custom values.yaml by adding the following

kfuse-auth:
  oauth2-proxy:
    config:
      

...

existingSecret: "kfuse-google-auth"
    

...

htpasswdFile:
  

...

...

existingSecret: "kfuse-

...

Install using the helm command with the custom_values.yaml .

For the config to take effect, Restart the auth service using:

kubectl rollout restart deployment auth

...

auth-users"