Hi Answer Community,
My team is excited to adopt Apache Answer as our internal Q&A platform. Our goal is to have a robust, production-ready deployment on our existing Kubernetes infrastructure.
Our primary and non-negotiable requirement is to integrate it with our company's in-house OIDC provider for seamless single sign-on (SSO).
We have reviewed the official documentation and the Helm chart, but we want to ensure we are following the best practices for configuration, security, and networking from the start. We would be grateful for guidance on the correct approach.
How Do We Configure OIDC in the Docker Image?
Once we have the plugin in our custom Docker image, what is the best method to feed our OIDC provider details (Client ID, Client Secret, Issuer URL, etc.) to the running Answer application?
Should we use environment variables?
Should we mount a configuration file (e.g., answer-config.yaml) into the container?
Could you provide an example of the required configuration format?
What is the best practice for securely providing the client_secret to the container in a Kubernetes environment? We would like to use a Kubernetes Secret. How do we mount it and tell Answer where to find it?
I just need to know on how I can get this up and running in our k8 cluster.