Bitnami Helm部署RabbitMQ至AKS后Azure AD登录按钮不显示
RabbitMQ AKS部署后Azure AD认证登录按钮不显示问题
已通过Bitnami Helm Chart将rabbitmq:11.1.1版本成功部署至AKS集群,无部署异常。尝试启用Azure AD认证时,管理控制台未显示Azure AD登录按钮,仅出现常规登录界面,操作步骤遵循RabbitMQ官方文档。
部署配置
replicaCount: 3 clustering: forceBoot: true metrics: enabled: true serviceMonitor: enabled: true namespace: prometheus labels: "release: prometheus" pdb: create: true minAvailable: 2 image: debug: true plugins: "rabbitmq_management rabbitmq_auth_backend_oauth2 rabbitmq_peer_discovery_k8s rabbitmq_shovel_management" extraPlugins: "rabbitmq_auth_backend_oauth2" extraVolumes: - name: secret-provider csi: driver: secrets-store.csi.k8s.io readOnly: true volumeAttributes: secretProviderClass: secret-provider extraVolumeMounts: - name: secret-provider readOnly: true mountPath: /mnt/secrets-store ingress: enabled: true extraTls: - hosts: - rabbitmq.example.net secretName: rabbitmq-tls hostname: rabbitmq.example.net tls: true ingressClassName: nginx-internal existingSecret: rabbitmq-tls service: type: LoadBalancer loadBalancerIP: "10.1.1.1" annotations: service.beta.kubernetes.io/azure-load-balancer-internal: "true" auth: tls: enabled: true autoGenerated: false failIfNoPeerCert: false sslOptionsVerify: verify_peer existingSecret: "rabbitmq-ampq-tls" existingSecretFullChain: true extraEnvVars: - name: TZ value: "Europe/Warsaw" - name: MODE value: azure resources: limits: cpu: 2000m memory: 2Gi requests: cpu: 100m memory: 256Mi advancedConfiguration: |- [ {rabbit, [ {auth_backends, [rabbit_auth_backend_oauth2, rabbit_auth_backend_internal]} ]}, {rabbitmq_management, [ {oauth_enabled, true}, {oauth_client_id, "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"}, {oauth_provider_url, "https://login.microsoftonline.com/yyyyyyyy-yyyy-yyyy-yyyy-yyyyyyyyyyyy"} ]}, {rabbitmq_auth_backend_oauth2, [ {resource_server_id, <<"xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx">>}, {extra_scopes_source, <<"roles">>}, {key_config, [ {jwks_url, <<"https://login.microsoftonline.com/yyyyyyyy-yyyy-yyyy-yyyy-yyyyyyyyyyyy/discovery/v2.0/keys">>} ]} ]} ].
异常现象
打开管理控制台仅显示常规登录界面,Pod日志出现以下警告:
2023-09-14 17:09:35.912239+02:00 [warning] <0.2349.0> Disabling OAuth 2 authorization, missing relevant configuration in management plugin
翻译: 禁用OAuth 2授权,管理插件中缺少相关配置
内容的提问来源于stack exchange,提问作者user2260103
相关产品推荐
相关产品推荐

