Operate authentication for basic-auth

Camunda 8 Topics
1

Hi, Im running locally basic stack: Zeebe + Operate + Elastic through KD deployment. I want to run operate with basic auth on my local cluster. I have configured values.yaml to deploy operate with the variables:

		"OPERATE_AUTH_MODE=basic",
		"OPERATE_AUTH_BASIC_USERNAME=admin",		"OPERATE_AUTH_BASIC_PASSWORD=$2a$12$M/WyfX2pwZ7rOCNwHMv8l.01Bj.HU/AWE5z6xqFONmvbkPALQr9HK",
		"SPRING_PROFILES_ACTIVE=basic-auth",

Password is bcrypted with 12 rounds.

However the user is not auto created in elastic. I have created the user manually in elastic with a request, and I can search for the user from within the operate pod, but the application itself seem to be unable to find it. Any ideas what might be the issue?

wget -qO- http://camunda-elasticsearch:9200/operate-user/_search \

–header=“Content-Type: application/json”
–post-data=‘{
“query”: {
“match”: {
“userId”: “admin”
}
}
}’
{“took”:15,“timed_out”:false,“_shards”:{“total”:1,“successful”:1,“skipped”:0,“failed”:0},“hits”:{“total”:{“value”:1,“relation”:“eq”},“max_score”:0.2876821,“hits”:[{“_index”:“operate-user”,“_id”:“MG6EkpMBkNHnRrqY2w8w”,“_score”:0.2876821,“_source”:{
“userId”: “admin”,
“password”: “$2a$12$M/WyfX2pwZ7rOCNwHMv8l.01Bj.HU/AWE5z6xqFONmvbkPALQr9HK”,
“roles”: [“camunda-admin”]
}}]}}~

2

you should not create user in elastic. You should create an user in KeyCloak or enabled supported authentication provider.

3

I don’t want to overcomplicate things on local
Cluster with keycloak or identity provider, doesn’t operate support basic authentication?

4

Short answer is NO.

5

ok, i have figured it out, it turns out, there is basic auth, it works properly if you disable authentication in global values. then keycloak and identity service can be disabled and ES acts as a storage for auth for operate.

6

This topic was automatically closed 7 days after the last reply. New replies are no longer allowed.