Keycloak#
QHub includes a deployment of Keycloak to centralise user management.
Within the qhub deploy
step, Keycloak is installed using the
Helm chart.
It’s possible to specify Helm overrides (i.e. your own values for selected fields in the Keycloak deployment’s
values.yaml
file) from the qhub-config.yaml
file. However, be aware that this may conflict with values that are
needed to be set in a certain way in order for QHub to operate correctly.
To set a Helm override, for example:
security:
keycloak:
initial_root_password: password123
realm_display_name: "Our Company QHub"
overrides:
extraEnv: |
- name: KEYCLOAK_DEFAULT_THEME
value: entqhubtheme
- name: KEYCLOAK_WELCOME_THEME
value: entqhubtheme
- name: PROXY_ADDRESS_FORWARDING
value: "true"
image:
repository: dockerusername/my-qhub-keycloak
If you do set overrides.extraEnv
as above, you must remember to include PROXY_ADDRESS_FORWARDING=true
. Otherwise,
the Keycloak deployment will not work as you will have overridden an important default Helm value that’s required by
QHub.
To find out more about using Keycloak in QHub, see Installation - Login
The security.keycloak.realm_display_name
setting is the text to display on the Keycloak login page for your QHub (and
in some other locations). This is optional, and if omitted will default to “QHub <project_name>” where project_name
is a field in the qhub-config.yaml
file.