stackabletech / stackabletech/superset-operator

Static authentication class is not working

Open
#583 3 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
Rust
Stars
35
Forks
4
Avg merge
12h 20m
Merged PRs (30d)
10

Description

Affected Stackable version

24.11.1

Affected Apache Superset version

No response

Current and expected behavior

I tried to configure static authentication class for my superset cluster.

the authentication class itself worked:

apiVersion: v1
kind: Secret
metadata:
  name: superset-users-credentials  
type: kubernetes.io/opaque
stringData:
  test1: test123

---
apiVersion: authentication.stackable.tech/v1alpha1
kind: AuthenticationClass
metadata:
  name: superset-users
spec:
  provider:
    static:
      userCredentialsSecret:
        name: superset-users-credentials

but when i used this authenticationClass in the SupersetCluster instance i got this error:

2024-12-31T16:02:44.845314Z ERROR stackable_operator::logging::controller: Failed to reconcile object controller.name="supersetcluster.superset.stackable.tech" error=reconciler for object SupersetCluster.v1alpha1.superset.stackable.tech/simple-superset.analytics failed error.sources=[failed to apply authentication configuration, failed to use authentication provider "Static" for authentication class "superset-users" - supported providers: ["LDAP", "OIDC"]]

this is the SupersetCluster.yaml file:

---
apiVersion: superset.stackable.tech/v1alpha1
kind: SupersetCluster
metadata:
  name: simple-superset
  namespace: analytics
spec:
  image:
    productVersion: 4.0.2
  clusterConfig:
    credentialsSecret: simple-superset-credentials
    authentication:
    - authenticationClass: superset-users

any suggestions?

Possible solution

No response

Additional context

No response

Environment

No response

Would you like to work on fixing this bug?

None

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start with the AuthenticationClass and SupersetCluster.yaml examples in the report, then trace the SupersetCluster authentication reconciliation that emits the supported-providers error. Compare the existing LDAP and OIDC handling with the requested static provider. Done means a static AuthenticationClass is accepted and the SupersetCluster reconciles successfully.

Written by the indexing model from the issue text.

Assessment

Tech stack
kubernetes, rust
Domain
authentication, devops
Issue type
Bug
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.