We use analytics and cookies to understand site traffic. Information about your use of our site is shared with Google for that purpose.You can read our privacy policies and terms of use etc by clicking here.
App level Authentication
Seldon Deploy can the setup with an app level authentication with an OIDC provider. This would be particularly useful when a gateway level authentication is not setup for the kubernetes cluster.
This feature can be activated by configuring the values file of the Seldon deploy helm chart. This is done by setting the variable enableAppAuth
boolean to “true” and further providing the OIDC configurations as env variables to connect to OIDC providers like Keycloak or Dex.
# boolean to enable app-level auth (defaults to "false")
enableAppAuth: true
Add config / env variables
Before we run deploy intall using the helm chart, we need to make sure that add the OIDC configuration to the env section:
env:
OIDC_PROVIDER:"" # oidc providerURL
CLIENT_ID: "" # oidc client ID
CLIENT_SECRET:"" # oidc client secret
REDIRECT_URL:"" # `${oidc_redirect_url}/seldon-deploy/auth/callback`
OIDC_SCOPES:"" # oidc scopes (defaults to "profile email groups")
USERID_CLAIM_KEY:"" # claim to be used as userid (defaults to "preferred_username")
Now go ahead with this installation with the helm chart as mentioned in installation page. Also check Visibility Restriction per Namespace for more information on how to use USERID_CLAIM_KEY
environment variable.