Backend: Frontend: Add OIDC Autologin by mudit06mah · Pull Request #4475 · kubernetes-sigs/headlamp

mudit06mah · 2026-01-28T19:53:48Z

Summary

This PR Adds feature to enable Autologin on OIDC as well as support for OIDC autologin.

Related Issue

Fixes #4343

Changes

Added oidc-auto-login flag to headlamp-server
Added support in redux for configs
Added authentication login to Layout.tsx

Steps to Test

Start headlamp server with flag oidc-auto-login=true and other oidc flags (oidc-client-id, oidc-idp-issuer-url, etc.)
Set up cluster with auth-provider = 'oidc'
Navigate to OIDC cluster, Redirects to OIDC provider's login screen.

Screenshots

oidc_autologin.mp4

Note

I couldn't correctly configure my OIDC client locally, but it completely works logically as intended.

Copilot

Pull request overview

This pull request adds OIDC auto-login functionality to Headlamp, allowing automatic redirection to the OIDC provider when enabled via the oidc-auto-login server flag. This eliminates the manual step of clicking "Sign In" for OIDC-authenticated clusters.

Changes:

Added oidc-auto-login configuration flag to the backend that can be enabled via command line
Extended Redux state to store the oidcAutoLogin setting from the backend configuration
Implemented auto-redirect logic in the Layout component to automatically initiate OIDC authentication flow

Reviewed changes

Copilot reviewed 7 out of 7 changed files in this pull request and generated 5 comments.

Show a summary per file

File	Description
backend/pkg/config/config.go	Adds `OidcAutoLogin` boolean field and corresponding command-line flag
backend/cmd/server.go	Initializes `OidcAutoLogin` from config when creating HeadlampConfig
backend/cmd/headlamp.go	Adds `OidcAutoLogin` field to HeadlampConfig struct and includes it in clientConfig API response
backend/cmd/stateless.go	Includes oidcAutoLogin in clientConfig for parseKubeConfig endpoint (hardcoded to false)
frontend/src/redux/configSlice.ts	Adds `oidcAutoLogin` field to ConfigState and updates setConfig action to accept it
frontend/src/components/authchooser/index.tsx	Preserves oidcAutoLogin when updating cluster config after auth testing
frontend/src/components/App/Layout.tsx	Implements auto-redirect logic via useEffect that redirects to OIDC provider when conditions are met

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

frontend/src/components/authchooser/index.tsx

frontend/src/components/App/Layout.tsx

backend/cmd/stateless.go

frontend/src/redux/configSlice.ts

frontend/src/components/App/Layout.tsx

mudit06mah · 2026-01-29T13:38:33Z

@illume I have made all the changes requested by copilot, Please review this again :)

menardorama · 2026-01-30T08:07:20Z

Hi that's awesome!

What would be the behavior when running in cluster config ?

Would the user being automatically be redirected when reaching the homepage ?

Anyway thanks a lot

mudit06mah · 2026-01-31T05:43:55Z

What would be the behavior when running in cluster config ?

Would the user being automatically be redirected when reaching the homepage ?

I haven't tested it properly but, yes, It should redirect the user to homepage :)

mudit06mah · 2026-02-02T05:07:23Z

@illume Can you Please review this again? 👾

Copilot

Pull request overview

Copilot reviewed 6 out of 6 changed files in this pull request and generated 8 comments.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

frontend/src/redux/configSlice.ts

frontend/src/components/App/Layout.tsx

frontend/src/redux/configSlice.ts

frontend/src/components/App/Layout.tsx

mudit06mah · 2026-02-04T15:05:57Z

@illume I have made the changes suggested by copilot, Can you please review this again?

illume

Thank you for those changes.

I noticed there's now a merge conflict.

Copilot

Pull request overview

Copilot reviewed 6 out of 6 changed files in this pull request and generated 5 comments.

Comments suppressed due to low confidence (1)

backend/pkg/config/config.go:451

A new config flag/koanf key is introduced (oidc-auto-login), but there’s no corresponding config parsing test coverage. Add a test case in backend/pkg/config/config_test.go verifying the flag (and ideally HEADLAMP_CONFIG_OIDC_AUTO_LOGIN env var) correctly sets OidcAutoLogin, to prevent regressions in the flag/env precedence logic.

func addOIDCFlags(f *flag.FlagSet) {
	f.Bool("oidc-auto-login", false, "Automatic Redirect to OIDC provider")
	f.String("oidc-client-id", "", "ClientID for OIDC")
	f.String("oidc-client-secret", "", "ClientSecret for OIDC")
	f.String("oidc-validator-client-id", "", "Override ClientID for OIDC during validation")
	f.String("oidc-idp-issuer-url", "", "Identity provider issuer URL for OIDC")
	f.String("oidc-callback-url", "", "Callback URL for OIDC")
	f.String("oidc-validator-idp-issuer-url", "", "Override Identity provider issuer URL for OIDC during validation")
	f.String("oidc-scopes", "profile,email", "A comma separated list of scopes needed from the OIDC provider")
	f.Bool("oidc-skip-tls-verify", false, "Skip TLS verification for OIDC")
	f.String("oidc-ca-file", "", "CA file for OIDC")
	f.Bool("oidc-use-access-token", false, "Setup oidc to pass through the access_token instead of the default id_token")
	f.Bool("oidc-use-pkce", false, "Use PKCE (Proof Key for Code Exchange) for enhanced security in OIDC flow")
	f.String("me-username-path", DefaultMeUsernamePath,

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

backend/cmd/headlamp.go

backend/pkg/config/config.go

frontend/src/redux/configSlice.ts

frontend/src/components/App/Layout.tsx

illume

Looking good.

Can you please check the final open review comments? If you disagree with them, please write in there why and mark them as resolved.

mudit06mah · 2026-02-11T14:48:45Z

Can you please check the final open review comments? If you disagree with them, please write in there why and mark them as resolved.

I had already made those changes earlier :)

illume

🎉 thanks!

This looks fine to me. I’ll leave it open a bit longer before merging to give someone else a chance to review it if they feel inclined.

k8s-ci-robot · 2026-02-11T17:18:59Z

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: illume, mudit06mah

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

~~OWNERS~~ [illume]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

mudit06mah · 2026-02-12T14:42:22Z

@illume While working on my other PR related to adding a flag, I noticed that I have not added this flag to the values.schema.json so I made those changes right now, Please review again if necessary.

k8s-ci-robot requested review from illume and sniok January 28, 2026 19:53

k8s-ci-robot added size/M Denotes a PR that changes 30-99 lines, ignoring generated files. cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. labels Jan 28, 2026

mudit06mah mentioned this pull request Jan 28, 2026

Enable autologin on OIDC #4343

Open

illume requested a review from Copilot January 28, 2026 20:43

Copilot started reviewing on behalf of illume January 28, 2026 20:43 View session

Copilot AI reviewed Jan 28, 2026

View reviewed changes

mudit06mah force-pushed the feat/oidc_autologin branch from b6ad78c to d221613 Compare January 29, 2026 13:07

mudit06mah force-pushed the feat/oidc_autologin branch 2 times, most recently from 0e497aa to 836eafc Compare January 29, 2026 13:33

mudit06mah force-pushed the feat/oidc_autologin branch from 2d138ea to 6acebea Compare January 29, 2026 13:37

illume requested a review from Copilot February 4, 2026 11:53

Copilot started reviewing on behalf of illume February 4, 2026 11:54 View session

Copilot AI reviewed Feb 4, 2026

View reviewed changes

mudit06mah force-pushed the feat/oidc_autologin branch from 6acebea to 2de498f Compare February 4, 2026 15:05

mudit06mah force-pushed the feat/oidc_autologin branch from 2de498f to 25e19e8 Compare February 4, 2026 15:20

k8s-ci-robot added the needs-rebase Indicates a PR cannot be merged because it has merge conflicts with HEAD. label Feb 7, 2026

illume requested changes Feb 8, 2026

View reviewed changes

illume requested a review from Copilot February 8, 2026 14:17

Copilot started reviewing on behalf of illume February 8, 2026 14:17 View session

illume added backend Issues related to the backend oidc Issue related to OIDC labels Feb 8, 2026

Copilot AI reviewed Feb 8, 2026

View reviewed changes

mudit06mah force-pushed the feat/oidc_autologin branch 2 times, most recently from 8e87ad4 to f00c57c Compare February 10, 2026 15:26

k8s-ci-robot added size/L Denotes a PR that changes 100-499 lines, ignoring generated files. and removed needs-rebase Indicates a PR cannot be merged because it has merge conflicts with HEAD. size/M Denotes a PR that changes 30-99 lines, ignoring generated files. labels Feb 10, 2026

mudit06mah force-pushed the feat/oidc_autologin branch from f00c57c to 3c4f223 Compare February 10, 2026 15:40

mudit06mah requested a review from illume February 11, 2026 14:24

illume requested changes Feb 11, 2026

View reviewed changes

illume approved these changes Feb 11, 2026

View reviewed changes

k8s-ci-robot added the approved Indicates a PR has been approved by an approver from all required OWNERS files. label Feb 11, 2026

mudit06mah added 4 commits February 12, 2026 20:06

backend: cmd: pkg: Add oidc autologin flag and config

84364c8

frontend: components: redux: Add oidc autologin and config

db8cc49

charts: deployment: values: Add oidc auto-login configuration

0373094

docs: installation: Add oidc auto-login to guide

d615418

mudit06mah force-pushed the feat/oidc_autologin branch from 3c4f223 to d615418 Compare February 12, 2026 14:39

Conversation

mudit06mah commented Jan 28, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary

Related Issue

Changes

Steps to Test

Screenshots

Note

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Reviewed changes

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

mudit06mah commented Jan 29, 2026

Uh oh!

menardorama commented Jan 30, 2026

Uh oh!

mudit06mah commented Jan 31, 2026

Uh oh!

mudit06mah commented Feb 2, 2026

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

mudit06mah commented Feb 4, 2026

Uh oh!

illume left a comment

Choose a reason for hiding this comment

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

illume left a comment

Choose a reason for hiding this comment

Uh oh!

mudit06mah commented Feb 11, 2026

Uh oh!

illume left a comment

Choose a reason for hiding this comment

Uh oh!

k8s-ci-robot commented Feb 11, 2026

Uh oh!

mudit06mah commented Feb 12, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

mudit06mah commented Jan 28, 2026 •

edited

Loading