Run Commands

MockIDP

Learn how to authenticate with MockIDP for testing and development purposes.

April 4, 2024

MockIDP is used for testing and development so that you can run HPE ML Data Management and experiment with permissions locally without having to set up an external identity provider.

Before You Start #

How to Activate MockIDP #

The following steps assume that you are deploying locally and wish to have Console enabled.

  1. Obtain your current user-input helm values:

    helm get values pachyderm  > values.yaml
  2. Add Console configuration:

    console:
      disableTelemetry: true
      config:
        oauthRedirectURI: http://localhost/oauth/callback/?inline=true
        oauthClientSecret: '123'
  3. Add OIDC configuration:

    oidc:
     issuerURI: "http://pachd:30658/dex"
     userAccessibleOauthIssuerHost: http://localhost

    A minimal values.yaml file should look like this:

    deployTarget: LOCAL
    pachd:
      enterpriseLicenseKeySecretName: pachyderm-enterprise-key
    proxy:
      enabled: true
      host: localhost
      service:
        type: LoadBalancer
    console:
     disableTelemetry: true
     config:
       oauthRedirectURI: http://localhost/oauth/callback/?inline=true
       oauthClientSecret: '123'
    oidc:
     issuerURI: "http://pachd:30658/dex"
     userAccessibleOauthIssuerHost: http://localhost
  4. Upgrade your cluster:

    helm upgrade pachyderm pachyderm/pachyderm -f values.yaml
  5. Connect:

    pachctl connect grpc://localhost:80
  6. Log in via the browser at localhost or via the CLI:

    pachctl auth login
    • user: admin
    • password: password
  7. Verify that you are logged in:

    pachctl auth whoami
    You are "user:kilgore@kilgore.trout"
     session expires: 21 Sep 23 18:07 UTC
  8. List your projects to view your permissions/access level:

    pachctl list projects
    ACTIVE PROJECT           ACCESS_LEVEL                 CREATED           DESCRIPTION
    default                 [clusterAdmin projectWriter]    3 days ago        -
    * batch-inference-1     [clusterAdmin projectOwner]     About an hour ago -

You can now test and develop locally with MockIDP and Console enabled.