Kubeflow create new user password

1. establish Profile, profile.yaml

apiVersion: kubeflow.org/v1beta1
kind: Profile
metadata:
  name: wangzy-p   # replace with the name of profile you want, this will be user's namespace name
spec:
  owner:
    kind: User
    name: wangzy-[email protected]   # replace with the email of the user

establish Profile kubectl apply -f profile.yaml

2. Generate user password

(base) user@master:~/code/k8s$ python3 -c 'from passlib.hash import bcrypt; import getpass; print(bcrypt.using(rounds=12, ident="2y").hash(getpass.getpass()))'
Password: 
$2y$12$2dTgxsqJrF11DRgcneqtROIGovcETM0OQTi58MAU2iRv2ORiGBowW

3. Configure user password

kubectl get configmap dex -n auth -o jsonpath='{.data.config\.yaml}' > dex-yaml.yaml

Add user information

- email: wangzy-[email protected]
  hash: $2y$12$2dTgxsqJrF11DRgcneqtROIGovcETM0OQTi58MAU2iRv2ORiGBowW
  # https://github.com/dexidp/dex/pull/1601/commits
  # FIXME: Use hashFromEnv instead
  username: wangzy-p

After adding

root@unode1:~# cat dex-yaml.yaml 
issuer: http://dex.auth.svc.cluster.local:5556/dex
storage:
  type: kubernetes
  config:
    inCluster: true
web:
  http: 0.0.0.0:5556
logger:
  level: "debug"
  format: text
oauth2:
  skipApprovalScreen: true
enablePasswordDB: true
staticPasswords:
- email: [email protected]
  hash: $2y$12$QfGyJbAwffkwUPG.VCKXEudTN2z1Fdrkva8Mg7YGkCPdMfSjk9H5i
  # https://github.com/dexidp/dex/pull/1601/commits
  # FIXME: Use hashFromEnv instead
  username: user
  userID: "15841185641784"
- email: [email protected]
  hash: $2y$12$2dTgxsqJrF11DRgcneqtROIGovcETM0OQTi58MAU2iRv2ORiGBowW
  username: wangzy-p
staticClients:
# https://github.com/dexidp/dex/pull/1664
- idEnv: OIDC_CLIENT_ID
  redirectURIs: ["/login/oidc"]
  name: 'Dex Login Application'
  secretEnv: OIDC_CLIENT_SECRET

4. to update config.yaml And restart deployment

kubectl create configmap dex --from-file=config.yaml=dex-yaml.yaml -n auth --dry-run=client -o yaml | kubectl apply -f -
kubectl rollout restart deployment dex -n auth