kubeflow: kfctl apply failes with No Auth Provider found for name "azure"

I’m trying to apply Kubeflow v.0.6.0 in our cluster, and it failes with the following error:

$ kfctl apply all -V
INFO[0000] Downloading /home/user/workspace/kubeflow/app.yaml to /tmp/455975017/app.yaml  filename="v1alpha1/application_types.go:334"
INFO[0000] Writing stripped KfDef to /home/user/workspace/kubeflow/app.yaml  filename="v1alpha1/application_types.go:626"
INFO[0000] Downloading /home/user/workspace/kubeflow/app.yaml to /tmp/812831412/app.yaml  filename="v1alpha1/application_types.go:334"
INFO[0000] Initializing a default restConfig for Kubernetes  filename="kustomize/kustomize.go:248"
FATA[0000] Can not get kubernetes kfdef: No Auth Provider found for name "azure"  filename="apps/group.go:262"

We use Azure/AD to connect/login to the cluster, and if I create a user that authenticates with a token instead (of my regular user) it all works.

I assume the problem is that kfctl is missing support for azure as an oidc flow.

There has been a short disuccion on slack.

About this issue

  • Original URL
  • State: closed
  • Created 5 years ago
  • Comments: 16 (8 by maintainers)

Most upvoted comments

I think I can help with this.

It looks like this is coming from here: https://github.com/kubeflow/kubeflow/blob/32b74431a72ce4064b727111a92de3ec42a172b3/bootstrap/v2/pkg/apis/apps/group.go#L262

If I understand @Kyrremann’s comment the various auth modules in the K8s go client are plugins and need to be explicitly importing. I think its this module https://github.com/kubernetes/client-go/tree/master/plugin/pkg/client/auth

@Kyrremann Any interest in trying to add a PR to do that?

@aronchick Anyone on the Azure side who could pick this up and test it out?

Issue-Label Bot is automatically applying the label kind/bug to this issue, with a confidence of 0.63. Please mark this comment with šŸ‘ or šŸ‘Ž to give our bot feedback!

Links: app homepage, dashboard and code for this bot.