Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

MetalK8s UI isn't retrieving groups claim from Dex #2526

Closed
gdemonet opened this issue May 6, 2020 · 0 comments · Fixed by #2529
Closed

MetalK8s UI isn't retrieving groups claim from Dex #2526

gdemonet opened this issue May 6, 2020 · 0 comments · Fixed by #2529
Assignees
@gdemonet
Labels
complexity:easy Something that requires less than a day to fix kind:bug Something isn't working topic:authentication Anything related to user authentication topic:ui UI-related issues
Milestone
MetalK8s 2.5.1

Comments

@gdemonet
Copy link
Contributor

gdemonet commented May 6, 2020

Component: ui, dex

What happened:

When trying to use Dex with a GitHub connector (MetalK8s 2.5.0), I couldn't use the groups claim to bind a role to my users (but was able to bind with the username).

What was expected:

We should be able to bind roles to groups provided by Dex, and assume those roles from the UI.

Steps to reproduce:

  • Setup Dex to use a connector providing the groups claim
  • Create a ClusterRoleBinding for the desired Group to the desired ClusterRole
  • Authenticate with the external provider to MetalK8s UI, and observe 403 responses to any request against /api/kubernetes in the browser dev tools

Resolution proposal (optional):

The UI should request the groups scope, as it's not automatically provided by Dex.
@gdemonet gdemonet added kind:bug Something isn't working topic:ui UI-related issues complexity:easy Something that requires less than a day to fix topic:authentication Anything related to user authentication labels May 6, 2020
@gdemonet gdemonet added this to the MetalK8s 2.5.1 milestone May 6, 2020
@gdemonet gdemonet self-assigned this May 6, 2020
@gdemonet gdemonet mentioned this issue May 6, 2020
Merged
@bert-e bert-e closed this as completed in 1a19242 May 7, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@gdemonet gdemonet

Labels
complexity:easy Something that requires less than a day to fix kind:bug Something isn't working topic:authentication Anything related to user authentication topic:ui UI-related issues
Projects
None yet
Milestone
MetalK8s 2.5.1
Development

Successfully merging a pull request may close this issue.

ui/oidc: Add 'groups' scope when requesting an id_token from Dex scality/metalk8s
1 participant
@gdemonet