Hi, I'm trying to setup open id for Minio that cam...
# help
u
Hi, I'm trying to setup open id for Minio that came in as part of docker-compose of LakeFS. How do I run this command to setup the authentication
Copy code
mc admin config set myminio identity_openid \
  config_url="<https://authentik.company/application/o/><applicaiton-slug>/.well-known/openid-configuration" \
  client_id="<client id from above>" \
  client_secret="<client secret from above>" \
  scopes="openid,profile,email,minio"
u
I will look into that and get back later today - my main concern is that it uses MinIO's assume role to get access to the data and it needs to be compatible with AWS S3 SDK. Note that the docker-compose is an example how to use lakeFS with different integrations, you will need to volume mount your minio storage and lakeFS metadata. Not sure which compose you are using, but if your lakeFS uses 'local' database it persist the data into your container and it will be gone when you bring your docker-compose down.
u
okay, I'm using this ```version: "3.5" services: lakefs-setup: image: treeverse/lakefs:latest-duckdb container_name: lakefs-setup depends_on: - lake_postgres - minio-setup environment: - LAKEFS_AUTH_ENCRYPT_SECRET_KEY=Kitty-Exes-Washtub-Overlying-Crested3 - LAKEFS_DATABASE_POSTGRES_CONNECTION_STRING=postgres://lakefs:lakefs@lake_postgres/postgres?sslmode=disable - LAKECTL_CREDENTIALS_ACCESS_KEY_ID=AKIAIOSFODNN7DDXAMPLE - LAKECTL_CREDENTIALS_SECRET_ACCESS_KEY=wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY - LAKECTL_SERVER_ENDPOINT_URL=http://lakefs:8000 - LAKEFS_BLOCKSTORE_TYPE=s3 entrypoint: ["/app/wait-for", "lake_postgres:5432", "--", "sh", "-c", "lakefs setup --user-name docker --access-key-id AKIAIOSFODNN7DDXAMPLE --secret-access-key wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY && lakectl repo create lakefs://example s3://example"] lake_postgres: image: postgres:11 container_name: lake_postgres environment: POSTGRES_USER: lakefs POSTGRES_PASSWORD: lakefs volumes: - ./db:/var/lib/postgresql/data lakefs: image: treeverse/lakefs:latest-duckdb container_name: lakefs depends_on: - minio-setup - lake_postgres ports: - "8500:8000" labels: UFW_MANAGED: 'TRUE' environment: - LAKEFS_DATABASE_TYPE=postgres - LAKEFS_DATABASE_POSTGRES_CONNECTION_STRING=postgres://lakefs:lakefs@lake_postgres/postgres?sslmode=disable - LAKEFS_BLOCKSTORE_TYPE=s3 - LAKEFS_BLOCKSTORE_S3_FORCE_PATH_STYLE=true - LAKEFS_BLOCKSTORE_S3_ENDPOINT=http://minio:9000 - LAKEFS_BLOCKSTORE_S3_CREDENTIALS_ACCESS_KEY_ID=minioadmin - LAKEFS_BLOCKSTORE_S3_CREDENTIALS_SECRET_ACCESS_KEY=Kitty-Exes-Washtub-Overlying-Crested3 - LAKEFS_AUTH_ENCRYPT_SECRET_KEY=Kitty-Exes-Washtub-Overlying-Crested3 - LAKEFS_STATS_ENABLED - LAKEFS_LOGGING_LEVEL - LAKECTL_CREDENTIALS_ACCESS_KEY_ID=AKIAIOSFODNN7DDXAMPLE - LAKECTL_CREDENTIALS_SECRET_ACCESS_KEY=wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY - LAKECTL_SERVER_ENDPOINT_URL=http://localhost:8000 entrypoint: ["/app/wait-for", "lake_postgres:5432", "--", "/app/lakefs", "run"] #entrypoint: ["/bin/sh", "-c"] #command: # - | # lakefs setup --local-settings --user-name docker --access-key-id AKIAIOSFODNN7EXAMPLE --secret-access-key wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY || true # lakefs run --local-settings & # wait-for -t 60 lakefs:8000 -- lakectl repo create lakefs://example s3://example || true # wait minio-setup: image: minio/mc container_name: minio-setup environment: - MC_HOST_lakefs=http://minioadmin:Kitty-Exes-Washtub-Overlying-Crested3@minio:9000 depends_on: - minio command: ["mb", "lakefs/example"] minio: image: minio/minio container_name: minio ports: - "9500:9000" - "9001:9001" environment: - MINIO_ROOT_USER=minioadmin - MINIO_ROOT_PASSWORD=Kitty-Exes-Washtub-Overlying-Crested3 volumes: - /mnt/scaleway/minio-teej:/data labels: UFW_MANAGED: 'TRUE' entrypoint: ["minio", "server", "/data", "--console-address", ":9001"] mariadb: image: mariadb:10 container_name: lake_mariadb volumes: - ./mysql/data:/var/lib/mysql environment: MYSQL_ROOT_PASSWORD: admin MYSQL_USER: admin MYSQL_PASSWORD: admin MYSQL_DATABASE: metastore_db hive-metastore: build: hive container_name: lake_hive depends_on: - mariadb ports: - "9083:9083" environment: - DB_URI=mariadb:3306 volumes: - ./etc/hive-site.xml:/opt/apache-hive-bin/conf/hive-site.xml ulimits: nofile: soft: 65536 hard: 65536 hive-server: build: hive container_name: lake_hiveserver2 ports: - "10001:10000" depends_on: - hive-metastore …