OpenUnison - AzureAD - K8S - include_auth_chain: "azuread-load-groups" - Could not find user

[druyz]

Hello,

I Installed ths solution, but I had a problem.

When include_auth_chain: "azuread-load-groups" is enabled, OpenUnison logs an error indicating "Could not find user," and the user is not redirected to the Kubernetes dashboard as expected. When this option is disabled, individual user permissions work, but using group-based permissions still does not.

Pre reqs is OK:
https://www.tremolo.io/post/kubernetes-and-azuread-sso

Kubernetes Version - 1.29

I installed using helm :
openunison-operator | CHART: openunison-operator-3-0.9 | APP VERSION: 1.0.39
orchestra | CHART: orchestra-2.10.61 | APP VERSION: 1.0.41
orchestra-login-portal | CHART: orchestra-login-portal-2.3.57 | APP VERSION: 1.0.41
orchestra-login-azuread | CHART: orchestra-login-azuread-1.0.3 | APP VERSION: 1.0.30

Image versions OpenUnison:

operator:
openunison-kubernetes-operator:1.0.6

orchestra :
openunison-k8s:1.0.41
activemq-docker:5.18.4
kube-oidc-proxy:1.0.7
python:3:1.0.0

orchestra-login-portal:
openunison-k8s-react:1.0.0

[druyz]

Error_and_values.zip
This is the error and values.yaml with parameters used

[mlbiam]

it's really hard to tell based on the log screenshot. There's probably a set of "caused by" lines that will lead to the root cause. Can you please send as text instead of a screenshot?

[druyz]

Logs_erro.txt

[druyz]

Hello @mlbiam, attached the logs.. thank you for your help.

[druyz]

Hello @mlbiam,

Are these logs ok to find the reason of error ?

Tks