MockIDP

MockIDP is used for testing and development so that you can run Pachyderm and experiment with permissions locally without having to set up an external identity provider.

Before You Start #

• You must have Enterprise enabled on your cluster

How to Activate MockIDP #

The following steps assume that you are deploying locally and wish to have Console enabled.

1. Obtain your current user-input helm values:

   helm get values pachyderm  > values.yaml

   

2. Add Console configuration:

   console:
     disableTelemetry: true
     config:
       oauthRedirectURI: http://localhost/oauth/callback/?inline=true
       oauthClientSecret: '123'

   

3. Add OIDC configuration:

   oidc:
    issuerURI: "http://pachd:30658/dex"
    userAccessibleOauthIssuerHost: http://localhost

   

   A minimal values.yaml file should look like this:

   deployTarget: LOCAL
   pachd:
     enterpriseLicenseKeySecretName: pachyderm-enterprise-key
   proxy:
     enabled: true
     host: localhost
     service:
       type: LoadBalancer
   console:
    disableTelemetry: true
    config:
      oauthRedirectURI: http://localhost/oauth/callback/?inline=true
      oauthClientSecret: '123'
   oidc:
    issuerURI: "http://pachd:30658/dex"
    userAccessibleOauthIssuerHost: http://localhost

   

4. Upgrade your cluster:

   helm upgrade pachyderm pachyderm/pachyderm -f values.yaml

   

5. Connect:

   pachctl connect grpc://localhost:80

   

6. Log in via the browser at localhost or via the CLI:

   pachctl auth login

   
   • user: admin
   • password: password

7. Verify that you are logged in:

   pachctl auth whoami

   

   You are "user:kilgore@kilgore.trout"
    session expires: 21 Sep 23 18:07 UTC

   

8. List your projects to view your permissions/access level:

   pachctl list projects

   

   ACTIVE PROJECT           ACCESS_LEVEL                 CREATED           DESCRIPTION
   default                 [clusterAdmin projectWriter]    3 days ago        -
   * batch-inference-1     [clusterAdmin projectOwner]     About an hour ago -

   

You can now test and develop locally with MockIDP and Console enabled.