kubeflow: Logout from Kubeflow application with Auth0 causing infinite loop
/kind bug
What steps did you take and what happened:
Setup authentication to Kubeflow with Auth0 following Authentication using OIDC steps.
With the difference, I use google account instead of github as a IdP on the Auth0 side.
This is the file which we are using to deploy kubeflow kfctl_aws_cognito.v1.2.0.yaml
I am able to login with my Google account to kubeflow via auth0 (my email whitelisted in auth0 rule which allowing connection to the kubeflow application).
When I click to logout link in kubeflow it is running into an infinite loop.
What did you expect to happen: Logout successfully.
Anything else you would like to add: [Miscellaneous information that will assist in solving the issue.] On the Auth0 side I see Failed Login event with message:
Callback URL mismatch. https://`ip-address`/oauth2/idpresponse is not in the list of allowed callback URLs
Instead of that ip-address
I use hostname, so are there any configurable variable to setup the callback URL on kubeflow side?
Environment:
- Kubeflow version build version v1beta1
- kfctl version : v1.2.0-0-gbc038f9
- Kubernetes platform : AWS EKS
- Kubernetes version: Client Version: v1.19.0 , Server Version: v1.18.9-eks-d1db3c
- OS : Debian ( this is the OS on EKS nodes )
About this issue
- Original URL
- State: open
- Created 3 years ago
- Reactions: 5
- Comments: 20 (9 by maintainers)
This can be fixed with a virtual service. Here is a link for a virtual service that fixes sign out when using Oauth2-Proxy and Keycloak.
https://github.com/argoflow/argoflow-aws/blob/master/distribution/oidc-auth/overlays/keycloak/oauth2-proxy-signout-virtual-service.yaml