Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Enabled the ability for init-auth to allow setting up external keycloak #311

Open
wants to merge 6 commits into
base: releases/v18
Choose a base branch
from

Conversation

SanjeevLakhwani
Copy link
Contributor

How to test:

  • Set up a keycloak instance
  • Make the desired realm for bento, update BENTOV2_AUTH_REALM accordingly
  • Make an admin user in the bento realm, you can follow the following steps: article
  • Setup the following variables accordingly BENTOV2_AUTH_ADMIN_USER & BENTOV2_AUTH_ADMIN_PASSWORD
  • Set BENTOV2_USE_EXTERNAL_KEYCLOAK in local.env as 1
  • run init-auth

Comment on lines +22 to +23
SETUP_EXTERNAL_KEYCLOAK = os.getenv("BENTOV2_USE_EXTERNAL_KEYCLOAK") in ("1", "true")
USE_EXTERNAL_IDP = False if SETUP_EXTERNAL_KEYCLOAK else os.getenv("BENTOV2_USE_EXTERNAL_IDP")
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Can't we simply use the USE_EXTERNAL_IDP variable? I don't see the use for an additional variable here.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It is to still give someone the opportunity to have an OIDC client that is not keycloak or if they do not want to use the init-auth command (and by mistake cause changes to their keycloak)

…nfiguration details and security recommendations
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants