I want to run Apache Answers on a Kubernetes Cluster with our in house OIDC

Viewed 10

Hi Answer Community,

My team is excited to adopt Apache Answer as our internal Q&A platform. Our goal is to have a robust, production-ready deployment on our existing Kubernetes infrastructure.

Our primary and non-negotiable requirement is to integrate it with our company's in-house OIDC provider for seamless single sign-on (SSO).

We have reviewed the official documentation and the Helm chart, but we want to ensure we are following the best practices for configuration, security, and networking from the start. We would be grateful for guidance on the correct approach.

How Do We Configure OIDC in the Docker Image?

Once we have the plugin in our custom Docker image, what is the best method to feed our OIDC provider details (Client ID, Client Secret, Issuer URL, etc.) to the running Answer application?

Should we use environment variables?

Should we mount a configuration file (e.g., answer-config.yaml) into the container?

Could you provide an example of the required configuration format?

What is the best practice for securely providing the client_secret to the container in a Kubernetes environment? We would like to use a Kubernetes Secret. How do we mount it and tell Answer where to find it?

I just need to know on how I can get this up and running in our k8 cluster.

1 Answers

There is no plugin for OIDC yet, maybe you need to try to implement it based on the existing plugins. https://github.com/apache/answer-plugins

Environment variables enable automatic installation. https://answer.apache.org/docs/env

Configuration files can be mounted via configmap to the desired path.

What exactly is client_secret? If it's OIDC, then the plugin is configured via the backend management system.