Skip to content

Commit 03a0aef

Browse files
davidmirror-opsdavidmirror-ops
and
davidmirror-ops
authored
Add notes to selfAuth with Azure docs (#4835)
* Add notes from recent Azure deployments Signed-off-by: davidmirror-ops <david [email protected]> * Rephrase multicluster auth Signed-off-by: davidmirror-ops <david [email protected]> * Rephrase multicluster auth v2 Signed-off-by: davidmirror-ops <david [email protected]> --------- Signed-off-by: davidmirror-ops <david [email protected]> Co-authored-by: davidmirror-ops <david [email protected]>
1 parent 55a67f2 commit 03a0aef

File tree

1 file changed

+12
-12
lines changed

1 file changed

+12
-12
lines changed

docs/deployment/configuration/auth_setup.rst

+12-12
Original file line numberDiff line numberDiff line change
@@ -120,7 +120,7 @@ browser.
120120

121121
- ``http://localhost:30081/callback`` for sandbox or ``https://<your deployment url>/callback`` for other Flyte deployment types.
122122

123-
.. group-tab:: Microsoft Azure AD
123+
.. group-tab:: Microsoft Entra ID (Azure AD)
124124

125125
1. From the Azure homepage go to **Azure Active Directory**
126126
2. From the **Ovierview** page, take note of the **Tenant ID**
@@ -330,7 +330,7 @@ Apply OIDC Configuration
330330
userAuth:
331331
openId:
332332
# baseUrl: https://accounts.google.com # Uncomment for Google
333-
# baseUrl: https://login.microsoftonline.com/<tenant-id>/oauth2/v2.0/authorize # Uncomment for Azure AD
333+
# baseUrl: https://login.microsoftonline.com/<tenant-id>/v2.0 # Uncomment for Azure AD
334334
# For Okta, use the Issuer URI of the default auth server
335335
baseUrl: https://dev-<org-id>.okta.com/oauth2/default
336336
# Use the client ID generated by your IdP
@@ -351,28 +351,28 @@ Apply OIDC Configuration
351351
# Use the non-encoded version of the random password
352352
clientSecret: "<your-random-password>"
353353
clientId: flytepropeller
354-
355-
8. Save and exit your editor.
356354
357-
9. Restart ``flyteadmin`` for the changes to take effect:
355+
.. note::
358356

359-
.. prompt:: bash $
357+
For `multi-cluster deployments <https://docs.flyte.org/en/latest/deployment/deployment/multicluster.html>`__,
358+
you must add this Secret definition block to the `values-dataplane.yaml` file.
359+
If you are not running `flytepropeller` in the control plane cluster, you do not need to create this secret there.
360360

361-
kubectl rollout restart deployment/flyteadmin -n flyte
361+
8. Save and exit your editor.
362362

363-
10. Restart ``flytepropeller`` to start using authenticated requests:
363+
9. Upgrade your Helm release with the new configuration:
364364

365365
.. prompt:: bash $
366366

367-
kubectl rollout restart deployment/flytepropeller -n flyte
367+
helm upgrade <release-name> flyteorg/flyte-binary -n <your-namespace> --values <your-values-file>.yaml
368368

369-
11. Restart ``flytescheduler``` to start using authenticated requests:
369+
10. Verify that the `flytepropeller`, `flytescheduler` and `flyteadmin` Pods are restarted and running:
370370

371371
.. prompt:: bash $
372372

373-
kubectl rollout restart deployment/flytescheduler -n flyte
373+
kubectl get pods -n flyte
374374

375-
12. For flytectl/pyflyte, make sure that your local config file (``$HOME/.flyte/config.yaml``) includes the following option:
375+
11. For flytectl/pyflyte, make sure that your local config file (``$HOME/.flyte/config.yaml``) includes the following option:
376376

377377
.. code-block:: yaml
378378

0 commit comments

Comments
 (0)