Skip to content

Conversation

Pradyumn-cloud
Copy link

@Pradyumn-cloud Pradyumn-cloud commented Oct 10, 2025

Fix - #3244

Changes done as Mentioned in issue.

insecureSkipVerify set to true

added jwksUri: http://dex.auth.svc.cluster.local:5556/dex/keys

✅ Contributor Checklist

Copy link

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
Once this PR has been reviewed and has the lgtm label, please assign yanniszark for approval. For more information see the Kubernetes Code Review Process.

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@juliusvonkohout
Copy link
Member

You need to sign you commits as desribed in https://github.com/kubeflow/manifests/pull/3257/checks?check_run_id=52443746965

clientSecret: $CLIENT_SECRET
redirectURI: $REDIRECT_URI
insecure: false
insecureSkipVerify: true
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

  1. the default should be false
  2. Please link in an inline comment about self-signed certificates to the dex documentation where this is documented

app: istio-ingressgateway
jwtRules:
- issuer: $DEX_ISSUER
jwksUri: http://dex.auth.svc.cluster.local:5556/dex/keys
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Please revert this. It should be a comment for the variable in line 156 DEX_ISSUER="https://kubeflow.example.com/dex". Please also link to the dex documentation or something that explains the change.

Signed-off-by: Pradyumn-cloud <[email protected]>
Signed-off-by: Pradyumn-cloud <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

documentation fix in case of external IdP and Kubeflow with self-signed certs

2 participants