Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-60626

Document the usage of extraScopes field when configure external oidc provider in auth docs

XMLWordPrintable

    • Quality / Stability / Reliability
    • False
    • Hide

      None

      Show
      None
    • None
    • None
    • None
    • None
    • None
    • None
    • None
    • None
    • None
    • None
    • None
    • None
    • None
    • None

      Description of problem:

      If did not set extraScopes in authentication for  some external oidc providers(like gitlab), console  will be in misleading loop, like the bug's issue: https://issues.redhat.com/browse/OCPBUGS-59353,so  better to add the configuration in docs: https://docs.redhat.com/en/documentation/openshift_container_platform/4.19/html/authentication_and_authorization/external-auth
          

      Version-Release number of selected component (if applicable):

          v4.20
          

      How reproducible:

          always 
          

      Steps to Reproduce:

      
      

      Expected results:

          Should add extraScopes field in authentication when configure  external oidc provider   in external auth docs.
        
        - name: gitlab-oidc
          issuer:
              issuerURL: "https://gitlab.com"
             audiences: 
             - <GitLab_Application_ID>
          oidcClients:
          - clientID: <GitLab_Application_ID>
             clientSecret:
                  name: gitlab-secret
              componentName: console
              componentNamespace: openshift-console
              extraScopes:    #example for adding extraScopes
              - email
              - profile     
      

              rhn-support-ahoffer Andrea Hoffer
              rhn-support-wewang Wen Wang
              None
              XiuJuan Wang
              Wen Wang Wen Wang
              None
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated: