How to set up Google oauth through environment variables instead of config yaml

[joaoluchetti]

Hi,

I am configuring google oauth and would like to have my clientid and clientsecret coming from a secret instead of putting it as plaintext inside the values.yaml yamlApplicationConfig section, is it possible to setup oauth through envs that read from a secret?

Thanks in advance.

[Narekmat]

Hello @joaoluchetti.
Yes you can. There are two ways.

1. You can create secret and specify that secret name in values.yaml "existingSecret: """ section.
2. You can specify your vars in section envs.secret with key:value in values.yaml
   Here is an example.

envs:
  secret:
    TEST1_ENV: test1_value
    TEST2_ENV: test2_value

[joaoluchetti]

Hi,

Thanks for your answer.

I see, but what should be the variables for Google Oauth? couldn't find it on the documentation

[Haarolean]

kafka:
  clusters:
    - name: local
      bootstrapServers: localhost:9092
    # ...

auth:
  type: OAUTH2
  oauth2:
    client:
      google:
        provider: google
        clientId: xxx.apps.googleusercontent.com
        clientSecret: GOCSPX-xxx
        user-name-attribute: email
        custom-params:
          type: google
          allowedDomain: provectus.com

Line breaks are replaceable with an underscore if you wish to see them in env vars format (I recommend using yaml config map with helm).

[joaoluchetti]

but this is coming from a config in values that generates a configmap based on the yaml, i would like to use clientId and clientSecret as already existing secrets, in that case what would be the variables for that?

[Narekmat]

@joaoluchetti you can try to use your env variables names which you are providing via existing secret instead of
xxx.apps.googleusercontent.com and GOCSPX-xxx plain text values.