Integrate with the Canonical Identity Platform¶
The Canonical Identity Platform is a charmed solution designed to integrate with external Identity and Access Management (IAM) systems, while also offering the option for a fully built-in IAM deployment. Within the platform, Hydra acts as the OpenID Connect (OIDC) server, providing an oauth relation interface.
The Canonical Identity Platform can either serve as an identity broker to federate external identity providers, or support native identity management via Ory Kratos.
Prerequisites¶
A running Charmed Airflow deployment. If you haven’t deployed it yet, follow the tutorial first.
Deploy the Canonical Identity Platform¶
Deploy the Canonical Identity Platform and configure your preferred identity provider. For detailed instructions on both supported integration methods, refer to the Set up the identity provider section of the Canonical Identity Platform tutorial.
Integrate with Airflow Coordinator¶
Add the required integration between the hydra and airflow-coordinator-k8s charms:
juju switch airflow
juju consume <hydra_offer_url> hydra
juju integrate hydra:oauth airflow-coordinator-k8s:oauth
Note
You can find the <hydra_offer_url> in either:
- The output of terraform apply
- The output of juju offers --model iam
This integration will enable authentication with the identity providers in the deployed Canonical Identity Platform.