From 685b53b227b7471024dfc04f6a876fe71edfa0a4 Mon Sep 17 00:00:00 2001 From: Pratik Jagrut Date: Wed, 11 Dec 2024 23:15:09 +0530 Subject: [PATCH] Add troubleshooting note for group visibility issue in Assign Global Role --- .../configure-keycloak-oidc.md | 17 +++++++++++++++++ .../configure-keycloak-oidc.md | 16 ++++++++++++++++ .../configure-keycloak-oidc.md | 16 ++++++++++++++++ 3 files changed, 49 insertions(+) diff --git a/docs/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/authentication-config/configure-keycloak-oidc.md b/docs/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/authentication-config/configure-keycloak-oidc.md index d02c51d9761..67f4d908a44 100644 --- a/docs/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/authentication-config/configure-keycloak-oidc.md +++ b/docs/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/authentication-config/configure-keycloak-oidc.md @@ -156,3 +156,20 @@ When you fill the **Configure a Keycloak OIDC account** form and click on **Enab ### Keycloak Error: "Invalid grant_type" * In some cases, this error message may be misleading and is actually caused by setting the `Valid Redirect URI` incorrectly. + +### Unable to See Groups When Assigning Global Roles + +If you use a user that is not part of any groups for initial setup, then you cannot search for groups when trying to assign a global role. +To resolve this, you can either: + +1. Manually edit the `authconfig/keycloakoidc` object to enable group search. + + 1. On the Rancher server: + ```bash + kubectl edit authconfigs.management.cattle.io keycloakoidc + ``` + 2. Set `groupSearchEnabled: true`. + 3. Save your changes. + +2. Reconfigure your Keycloak OIDC setup using a user that is assigned to at least one group in Keycloak. + diff --git a/versioned_docs/version-2.10/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/authentication-config/configure-keycloak-oidc.md b/versioned_docs/version-2.10/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/authentication-config/configure-keycloak-oidc.md index 2a30782e76c..8e381a00c8b 100644 --- a/versioned_docs/version-2.10/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/authentication-config/configure-keycloak-oidc.md +++ b/versioned_docs/version-2.10/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/authentication-config/configure-keycloak-oidc.md @@ -147,3 +147,19 @@ When you fill the **Configure a Keycloak OIDC account** form and click on **Enab ### Keycloak Error: "Invalid grant_type" * In some cases, this error message may be misleading and is actually caused by setting the `Valid Redirect URI` incorrectly. + +### Unable to See Groups When Assigning Global Roles + +If you use a user that is not part of any groups for initial setup, then you cannot search for groups when trying to assign a global role. +To resolve this, you can either: + +1. Manually edit the `authconfig/keycloakoidc` object to enable group search. + + 1. On the Rancher server: + ```bash + kubectl edit authconfigs.management.cattle.io keycloakoidc + ``` + 2. Set `groupSearchEnabled: true`. + 3. Save your changes. + +2. Reconfigure your Keycloak OIDC setup using a user that is assigned to at least one group in Keycloak. diff --git a/versioned_docs/version-2.9/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/authentication-config/configure-keycloak-oidc.md b/versioned_docs/version-2.9/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/authentication-config/configure-keycloak-oidc.md index caec0cd99a3..12ece1a8cdf 100644 --- a/versioned_docs/version-2.9/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/authentication-config/configure-keycloak-oidc.md +++ b/versioned_docs/version-2.9/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/authentication-config/configure-keycloak-oidc.md @@ -156,3 +156,19 @@ When you fill the **Configure a Keycloak OIDC account** form and click on **Enab ### Keycloak Error: "Invalid grant_type" * In some cases, this error message may be misleading and is actually caused by setting the `Valid Redirect URI` incorrectly. + +### Unable to See Groups When Assigning Global Roles + +If you use a user that is not part of any groups for initial setup, then you cannot search for groups when trying to assign a global role. +To resolve this, you can either: + +1. Manually edit the `authconfig/keycloakoidc` object to enable group search. + + 1. On the Rancher server: + ```bash + kubectl edit authconfigs.management.cattle.io keycloakoidc + ``` + 2. Set `groupSearchEnabled: true`. + 3. Save your changes. + +2. Reconfigure your Keycloak OIDC setup using a user that is assigned to at least one group in Keycloak. \ No newline at end of file