SSO Authentication

You can set up Single Sign-On Authentication for a Kloudfuse Cluster. Each provider will have specific steps that you will follow. Please reference the links below for the Provider you want integrate with.

Customize the sign-in page

The sign-in page of your Kloudfuse cluster has the following default configuration in the extraArgs section of the custom-values.yaml file:

     extraArgs:
       # provider-display-name: default based on provider used
       footer: "-"   # No footer
       custom-sign-in-logo: "-"    # No Logo
yaml

To customize the sign-in page for your Kloudfuse cluster, follow these steps:

  1. Edit the extraArgs section of the custom-values.yaml file with your customizations.

    See the OAuth2 Proxy documentation for available options.

     kfuse-auth:
       oauth2-proxy:
         config:
           ...
         extraArgs:
           provider-display-name: "Customer Provider"
           custom-sign-in-logo: "https://framerusercontent.com/images/1JKfsQjCthSQEaxzteDKpRprZM.png"
    yaml
helm upgrade --install kfuse oci://us-east1-docker.pkg.dev/mvp-demo-301906/kfuse-helm/kfuse \
  -n kfuse \
  --version <VERSION> \ (1)
  -f custom-values.yaml
1 Replace <VERSION> with a valid Kloudfuse release value. See Release Notes for the latest release.
  1. Restart the kfuse-auth deployment to apply the changes. For example, the customizations in Step 1 update the banner as shown below.