@@ -120,7 +120,7 @@ browser.
120
120
121
121
- ``http://localhost:30081/callback `` for sandbox or ``https://<your deployment url>/callback `` for other Flyte deployment types.
122
122
123
- .. group-tab :: Microsoft Azure AD
123
+ .. group-tab :: Microsoft Entra ID ( Azure AD)
124
124
125
125
1. From the Azure homepage go to **Azure Active Directory **
126
126
2. From the **Ovierview ** page, take note of the **Tenant ID **
@@ -330,7 +330,7 @@ Apply OIDC Configuration
330
330
userAuth :
331
331
openId :
332
332
# baseUrl: https://accounts.google.com # Uncomment for Google
333
- # baseUrl: https://login.microsoftonline.com/<tenant-id>/oauth2/ v2.0/authorize # Uncomment for Azure AD
333
+ # baseUrl: https://login.microsoftonline.com/<tenant-id>/v2.0 # Uncomment for Azure AD
334
334
# For Okta, use the Issuer URI of the default auth server
335
335
baseUrl : https://dev-<org-id>.okta.com/oauth2/default
336
336
# Use the client ID generated by your IdP
@@ -351,28 +351,28 @@ Apply OIDC Configuration
351
351
# Use the non-encoded version of the random password
352
352
clientSecret : " <your-random-password>"
353
353
clientId : flytepropeller
354
-
355
- 8. Save and exit your editor.
356
354
357
- 9. Restart `` flyteadmin `` for the changes to take effect :
355
+ .. note : :
358
356
359
- .. prompt :: bash $
357
+ For `multi-cluster deployments <https://docs.flyte.org/en/latest/deployment/deployment/multicluster.html >`__,
358
+ you must add this Secret definition block to the `values-dataplane.yaml ` file.
359
+ If you are not running `flytepropeller ` in the control plane cluster, you do not need to create this secret there.
360
360
361
- kubectl rollout restart deployment/flyteadmin -n flyte
361
+ 8. Save and exit your editor.
362
362
363
- 10. Restart `` flytepropeller `` to start using authenticated requests :
363
+ 9. Upgrade your Helm release with the new configuration :
364
364
365
365
.. prompt :: bash $
366
366
367
- kubectl rollout restart deployment/flytepropeller -n flyte
367
+ helm upgrade <release-name> flyteorg/flyte-binary -n <your-namespace> --values <your-values-file>.yaml
368
368
369
- 11. Restart `` flytescheduler` `` to start using authenticated requests:
369
+ 10. Verify that the ` flytepropeller `, ` flytescheduler ` and ` flyteadmin ` Pods are restarted and running:
370
370
371
371
.. prompt :: bash $
372
372
373
- kubectl rollout restart deployment/flytescheduler -n flyte
373
+ kubectl get pods -n flyte
374
374
375
- 12 . For flytectl/pyflyte, make sure that your local config file (``$HOME/.flyte/config.yaml ``) includes the following option:
375
+ 11 . For flytectl/pyflyte, make sure that your local config file (``$HOME/.flyte/config.yaml ``) includes the following option:
376
376
377
377
.. code-block :: yaml
378
378
0 commit comments