Configuring SSO Settings in Helm

[RoseSecurity]

What

• Is it possible to configure OAuth and SSO settings via this Helm chart?
• Curious what the best way to accomplish this is!

[shreve]

I think the answer is yes, depending on how much you want to accomplish. In my case, the Windmill Helm chart is pretty agnostic about it. That is, my org is hosting on EKS and has the entire deployment wrapped in OIDC auth by using AWS ALB annotations to specify the config.

If your scope includes an email, Windmill can use that to uniquely identify users for SSO.

    "alb.ingress.kubernetes.io/auth-scope": "openid email"