MockIDP is used for testing and development so that you can run Pachyderm and experiment with permissions locally without having to set up an external identity provider.
Before You Start #
- You must have Enterprise enabled on your cluster
How to Activate MockIDP #
The following steps assume that you are deploying locally and wish to have Console enabled.
Obtain your current user-input helm values:
helm get values pachyderm > values.yaml
console: disableTelemetry: true config: oauthRedirectURI: http://localhost/oauth/callback/?inline=true oauthClientSecret: '123'
Add OIDC configuration:
oidc: issuerURI: "http://pachd:30658/dex" userAccessibleOauthIssuerHost: http://localhost
A minimal
values.yaml
file should look like this:deployTarget: LOCAL pachd: enterpriseLicenseKeySecretName: pachyderm-enterprise-key proxy: enabled: true host: localhost service: type: LoadBalancer console: disableTelemetry: true config: oauthRedirectURI: http://localhost/oauth/callback/?inline=true oauthClientSecret: '123' oidc: issuerURI: "http://pachd:30658/dex" userAccessibleOauthIssuerHost: http://localhost
Upgrade your cluster:
helm upgrade pachyderm pachyderm/pachyderm -f values.yaml
Connect:
pachctl connect grpc://localhost:80
Log in via the browser at
localhost
or via the CLI:pachctl auth login
- user:
admin
- password:
password
- user:
Verify that you are logged in:
pachctl auth whoami
You are "user:kilgore@kilgore.trout" session expires: 21 Sep 23 18:07 UTC
List your projects to view your permissions/access level:
pachctl list projects
ACTIVE PROJECT ACCESS_LEVEL CREATED DESCRIPTION default [clusterAdmin projectWriter] 3 days ago - * batch-inference-1 [clusterAdmin projectOwner] About an hour ago -
You can now test and develop locally with MockIDP and Console enabled.