Configure Google OAuth2 Authentication

To enable Google OAuth2 you need register a new application with Google.

Create Google OAuth2 Keys

1. Go to the Credentials page.

2. Click Create credentials > OAuth client ID.

3. Select the Web application application type.

4. Enter Name (e.g. Kloudfuse)

5. Enter URL of the kloudfuse installation in the Authorized JavaScript Origins. Example: kloudfuse.yourcompany.com

6. Click Create

7. Copy the Client ID and Client Secret from the ‘OAuth Client’ modal

Enable Google Auth in Kloudfuse

1. Edit the auth-credentials secret in kfuse namespace of your kloudfuse installation.

   1. Replace/add Client ID, Client Secret and google domain - you will need to do base64 encode the Client ID, Client Secret and the google domain.

   2. kubectl edit secret auth-credentials -n kfuse

2. Set the authentication type (AUTH_TYPE) in auth config map to “google”

   1.  kubectl edit configmap auth -n kfuse

   2. You can also edit the values.yaml from your original installation of kfuse to add:

   3. auth:
        config:
          AUTH_TYPE: "google"

   4. You will need to do

      helm upgrade --install kfuse -f <values.yaml> -f <gcp/aws>.yaml

3. For the config to take effect

4. Restart the auth service

5. You should now see a Google login button on the login page