kubeflow: Logout from Kubeflow application with Auth0 causing infinite loop

/kind bug

What steps did you take and what happened: Setup authentication to Kubeflow with Auth0 following Authentication using OIDC steps. With the difference, I use google account instead of github as a IdP on the Auth0 side. This is the file which we are using to deploy kubeflow kfctl_aws_cognito.v1.2.0.yaml I am able to login with my Google account to kubeflow via auth0 (my email whitelisted in auth0 rule which allowing connection to the kubeflow application). When I click to logout link in kubeflow it is running into an infinite loop.

What did you expect to happen: Logout successfully.

Anything else you would like to add: [Miscellaneous information that will assist in solving the issue.] On the Auth0 side I see Failed Login event with message:

Callback URL mismatch. https://`ip-address`/oauth2/idpresponse is not in the list of allowed callback URLs

Instead of that ip-address I use hostname, so are there any configurable variable to setup the callback URL on kubeflow side?

Environment:

  • Kubeflow version build version v1beta1
  • kfctl version : v1.2.0-0-gbc038f9
  • Kubernetes platform : AWS EKS
  • Kubernetes version: Client Version: v1.19.0 , Server Version: v1.18.9-eks-d1db3c
  • OS : Debian ( this is the OS on EKS nodes )

About this issue

  • Original URL
  • State: open
  • Created 3 years ago
  • Reactions: 5
  • Comments: 20 (9 by maintainers)

Most upvoted comments

This can be fixed with a virtual service. Here is a link for a virtual service that fixes sign out when using Oauth2-Proxy and Keycloak.

https://github.com/argoflow/argoflow-aws/blob/master/distribution/oidc-auth/overlays/keycloak/oauth2-proxy-signout-virtual-service.yaml