Uploaded image for project: 'Project Quay'
  1. Project Quay
  2. PROJQUAY-6898

[DOC] Removing OIDC as internal authentication mechanism from all versions of Quay

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Done
    • Icon: Undefined Undefined
    • None
    • quay-v3.10.4
    • documentation, quay
    • False
    • None
    • False
    • Hide

      Simply install Quay with "AUTHENTICATION_TYPE: OIDC" in quay config file ** and  it will prompt following error:

       

      Entering migration mode to version: head
Traceback (most recent call last):
  File "/quay-registry/data/users/__init__.py", line 138, in get_users_handler
    raise RuntimeError("Unknown authentication type: %s" % authentication_type)
RuntimeError: Unknown authentication type: OIDC 

       

      Show
      Simply install Quay with "AUTHENTICATION_TYPE: OIDC" in quay config file ** and  it will prompt following error:   Entering migration mode to version: head Traceback (most recent call last):   File "/quay-registry/data/users/__init__.py" , line 138, in get_users_handler     raise RuntimeError( "Unknown authentication type: %s" % authentication_type) RuntimeError: Unknown authentication type: OIDC   
    • 0

      We got a customer who used "AUTHENTICATION_TYPE: OIDC "  in quayconfig file and quay failed to start. 

      Snippet of Quay config file:{}

      AUTHENTICATION_TYPE: OIDC 
AZURE_LOGIN_CONFIG: 
    CLIENT_ID: clientid 
    CLIENT_SECRET: clientsecret 
    OIDC_SERVER: https://sts.windows.net/tenantid/ 
    SERVICE_NAME: azure 
    LOGIN_BINDING_FIELD: email 
    LOGIN_SCOPES: 
        - openid 
        - email

      The above configuration prompted following error:

      raise RuntimeError("Unknown authentication type: %s" % authentication_type)
RuntimeError: Unknown authentication type: OIDC

      After removing AUTHENTICATION_TYPE: OIDC  from quay config file, Quay installation was successful.

      I have consulted about this issue with my colleague "Ivan Bazulic" and as per him, AUTHENTICATION_TYPE: OIDC is not supported and does not exist in code in any version of Quay.

      Hence the documents need to be corrected for all the quay versions including latest version quay 3.10.x. 

      Here is the Red Hat Quay configuration document and area where it needs correction.

      https://access.redhat.com/documentation/en-us/red_hat_quay/3.10/html-single/configure_red_hat_quay/index
3.4. General required fields
AUTHENTICATION_TYPE
(Required)
The authentication engine to use for credential authentication.
Values:
One of Database, LDAP, JWT, Keystone, OIDC  <----- this should be removed from the doc.

            rhn-support-stevsmit Steven Smith
            rhn-support-mjahangi Muhammad Selim Jahangir
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

              Created:
              Updated:
              Resolved: