how can i use oauth2 for sso

[Schwarao]

Under which category would you file this issue?

Helm chart

Apache Airflow version

3.0.6

What happened and how to reproduce it?

i dont know how can i config to use oauth2 . in values.yaml to helm

What you think should happen instead?

No response

Operating System

ubuntu

Deployment

Official Apache Airflow Helm Chart

Apache Airflow Provider(s)

No response

Versions of Apache Airflow Providers

No response

Official Helm Chart version

1.18.0

Kubernetes Version

No response

Helm Chart configuration

No response

Docker Image customizations

No response

Anything else?

No response

Are you willing to submit PR?

• Yes I am willing to submit a PR!

Code of Conduct

• I agree to follow this project's Code of Conduct

[cookesan]

For Airflow 3, configure OAuth through the FAB auth manager. In the Helm chart that means three separate pieces:

config:
  core:
    auth_manager: airflow.providers.fab.auth_manager.fab_auth_manager.FabAuthManager

webserver:
  webserverConfig: |
    from flask_appbuilder.security.manager import AUTH_OAUTH

    AUTH_TYPE = AUTH_OAUTH

Then provide the OAuth provider definition through the FAB config, for example with AIRFLOW__FAB__OAUTH_PROVIDERS. Keep the client secret in a Kubernetes secret, not as plain text in values.yaml; the chart has extraSecrets, extraEnv, and extraEnvFrom for that shape.

The provider JSON is provider-specific, but the Airflow docs show the generic structure: name, token_key, and a remote_app containing client_id, client_secret, api_base_url, access_token_url, and authorize_url. After changing it, restart the webserver/API components so the FAB webserver config and env vars are reloaded.