Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Upgrade to apicuro from 2.2.5.Final to 2.3.0.Final breaks keycloak Auth (needs documentation) #2828

Closed
jfreeman-hbo opened this issue Sep 22, 2022 · 5 comments
Assignees
Labels
area/auth Bug Something isn't working component/registry Impacts Documentation Use this to tag Pull Requests that introduce changes that should be documented.

Comments

@jfreeman-hbo
Copy link

When upgrading to the recent 2.3.0, our keycloak OIDC authentication broke, resulting in a 401 on the UI.

We fixed this by adding this environment variable to our helm chart:
- name: REGISTRY_UI_AUTH_TYPE
value: "keycloakjs"

Please update the documentation at: https://www.apicur.io/registry/docs/apicurio-registry/2.2.x/getting-started/assembly-configuring-the-registry.html#registry-security_registry

denoting that this ENV var is now required.

it would also be helpful if there was better documention on securing Apicurio behind any OIDC provider, which I think now is an option?

@apicurio-bot
Copy link

apicurio-bot bot commented Sep 22, 2022

Thank you for reporting an issue!

Pinging @carlesarnal to respond or triage.

@EricWittmann EricWittmann added Bug Something isn't working Impacts Documentation Use this to tag Pull Requests that introduce changes that should be documented. component/registry area/auth and removed triage/needs-triage labels Sep 23, 2022
@EricWittmann
Copy link
Member

@carlesarnal If this is true, can we have keycloakjs as the default value for that env var?

@carlesarnal
Copy link
Member

carlesarnal commented Sep 23, 2022

This is true for 2.3.0.Final but I have created this to make keycloakjs the default value when auth is enabled and none is set as the value (since does not makes any sense to have none and auth enabled).

@EricWittmann
Copy link
Member

Fixed in #2832 - I think we can leave this out of the documentation as long as we release 2.3.1.Final soon.

@EricWittmann
Copy link
Member

Thank you @jfreeman-hbo for reporting this!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area/auth Bug Something isn't working component/registry Impacts Documentation Use this to tag Pull Requests that introduce changes that should be documented.
Projects
None yet
Development

No branches or pull requests

3 participants