Skip to Content
Access & User ManagementUser ManagementAuth Secret Injection

Auth Secret Injection

Introduction

This guide outlines the steps to manually create scaleops-auth-config secret used to store ScaleOps auth configuration.

If you follow this guide, do not include authProvider in your helm values.

Option 1: Configure scaleops-auth-config secret

Fill in the correct fields with the relevant authentication provider, and apply the following secret definition:

apiVersion: v1
kind: Secret
metadata:
  name: scaleops-auth-config
  namespace: scaleops-system
type: Opaque
stringData:
  auth: >-
    {
      "type": 7,
      "builtInAuth": {
        "enabled": "true"
      }
    }

Option 2: Helm template to retrieve secret

Run helm template with correct values of the relevant authentication provider to retrieve secret definition:

helm template ... --show-only templates/dashboards-api/secret-oauth2.yaml

Option 3: External Secret

Store auth data json from previous steps on your secret provider, and reference it in the following ExternalSecret definition:

apiVersion: external-secrets.io/v1beta1
kind: ExternalSecret
metadata:
  name: scaleops-auth-config
  namespace: scaleops-system
spec:
  secretStoreRef:
    name: SECRET_STORE_NAME # Replace with your secret store name
    kind: ClusterSecretStore # Replace with your secret store kind
  target:
    name: scaleops-auth-config
    template:
      data:
        auth: "{{ .scaleops_auth }}"
  data:
    - secretKey: scaleops_auth
      remoteRef:
        key: path/to/secret # Replace with your secret path
AuthorizationScaleOps Cloud