-1
이 없습니다. 나는 1.3.1, 1.4.1 및 1.4.2에서 다음을 시도했다.스피너 커 GKE의 OAuth는 사용자의 정보는 내가이 튜토리얼을 사용하여 인증 내 스피너 커 인터페이스를 얻으려고 모든 필수 필드
Google 보안을 편집/적용/사용 설정 한 후 로그인을 시도하고 Google 로그인 화면에서 문제가 발생했습니다. 두 요소 인증을 완료하고 http://localhost:8084/login에 예상대로 나는 다음과 같은 오류가 나타날 수 있지만, 리디렉션하고시 :
[email protected]:~$ hal config security authn oauth2 edit --provider google \
> --client-id $CLIENT_ID \
> --client-secret $CLIENT_SECRET \
> --user-info-requirements hd=$DOMAIN
+ Get current deployment
Success
+ Get authentication settings
Success
+ Edit oauth2 authentication settings
Success
Problems in default.security:
- WARNING Your UI or API domain does not have override base URLs
set even though your Spinnaker deployment is a Distributed deployment on a
remote cloud provider. As a result, you will need to open SSH tunnels against
that deployment to access Spinnaker.
? We recommend that you instead configure an authentication
mechanism (OAuth2, SAML2, or x509) to make it easier to access Spinnaker
securely, and then register the intended Domain and IP addresses that your
publicly facing services will be using.
+ Successfully edited oauth2 method.
[email protected]:~$ hal config security authn oauth2 enable
+ Get current deployment
Success
+ Edit oauth2 authentication settings
Success
Problems in default.security:
- WARNING Your UI or API domain does not have override base URLs
set even though your Spinnaker deployment is a Distributed deployment on a
remote cloud provider. As a result, you will need to open SSH tunnels against
that deployment to access Spinnaker.
? We recommend that you instead configure an authentication
mechanism (OAuth2, SAML2, or x509) to make it easier to access Spinnaker
securely, and then register the intended Domain and IP addresses that your
publicly facing services will be using.
+ Successfully enabled oauth2
[email protected]:~$ hal deploy apply
+ Get current deployment
Success
+ Apply deployment
Success
+ Deploy spin-clouddriver
Success
+ Deploy spin-front50
Success
+ Deploy spin-orca
Success
+ Deploy spin-deck
Success
+ Deploy spin-echo
Success
+ Deploy spin-gate
Success
+ Deploy spin-igor
Success
+ Deploy spin-rosco
Success
Problems in default.security:
- WARNING Your UI or API domain does not have override base URLs
set even though your Spinnaker deployment is a Distributed deployment on a
remote cloud provider. As a result, you will need to open SSH tunnels against
that deployment to access Spinnaker.
? We recommend that you instead configure an authentication
mechanism (OAuth2, SAML2, or x509) to make it easier to access Spinnaker
securely, and then register the intended Domain and IP addresses that your
publicly facing services will be using.
아니에요 : 여기
{
"error": "Unauthorized",
"message": "Authentication Failed: User's info does not have all required fields.",
"status": 401,
"timestamp": 1506985726074
}
나는 또한 spinnaker's authentication setup을 검토 한 후 몇 가지 변경 사항을 반복적으로 적용하고 신선한 시크릿 브라우저로 테스트했지만 변경하지 않았습니다.
google provider is a packaged OAuth 2 provider with spinnaker 이래로, 나는 "자신의 공급자를 데려 오지 않는"어떤 추가 구성이 필요한지 혼란 스럽습니다.
어디서부터 시작할 수 있습니까? 문서에 대한 모든 참조/포인터?
여기에 사용중인 코드를 표시해야합니다. [mcve] 그렇지 않으면 아무렇지도 않은 것이 있습니다. 링크가 죽었습니다. 튜토리얼에 대한 링크는 아무에게도 아무런 도움이되지 않습니다. – Rob