Sonarqube pods getting crashed

Phanendra · May 28, 2024, 11:16am

Environment: Deploying sonarqube in AKS cluster.

We are deploying sonarqube in AKS cluster, where we need to use microsoft entra authentication with sonarqube.
While generating token for authentication, it is valid for specific time period, After that pods are getting crashed in the cluster.

Do we have a solution here to provide passwordless authentication with microsoft entraID, for authenticating with sonarqube ?

Colin · May 29, 2024, 7:55am

Hey there.

SonarQube doesn’t support passwordless authentication in this context. It doesn’t include the required packages

On the topic of token expiration… ideally you would refresh the token, but the documentation doesn’t seem great for that right now…

github.com/MicrosoftDocs/azure-docs

Add example of token expiration to Entra authentication example

opened 11:13PM - 15 May 24 UTC

pamelafox

postgresql/svc triaged assigned-to-author doc-enhancement Pri2 flexible-server/subsvc

The current code snippet does not show how to refresh the token, or even mention… the necessity of token refresh after 24 hours. Please ideally put the code for token refresh and/or put a big notice about it. We had an outage in a service due to not realizing that the tokens would expire (as there's a video out there that led us to believe they wouldn't expire as long as the connection wasn't dropped). This is the only documentation that mentions the token expiration: https://learn.microsoft.com/en-us/azure/postgresql/flexible-server/concepts-azure-ad-authentication#frequently-asked-questions --- #### Document Details ⚠ *Do not edit this section. It is required for learn.microsoft.com ➟ GitHub issue linking.* * ID: 94fca58b-3beb-e8e6-9801-2de8aec48de6 * Version Independent ID: 0407feac-2aa7-f932-0b99-e0a86b380767 * Content: [Connect with managed identity - Azure Database for PostgreSQL - Flexible Server](https://learn.microsoft.com/en-us/azure/postgresql/flexible-server/how-to-connect-with-managed-identity?source=recommendations) * Content Source: [articles/postgresql/flexible-server/how-to-connect-with-managed-identity.md](https://github.com/MicrosoftDocs/azure-docs/blob/main/articles/postgresql/flexible-server/how-to-connect-with-managed-identity.md) * Service: **postgresql** * Sub-service: **flexible-server** * GitHub Login: @kabharati * Microsoft Alias: **kabharati**

Sorry I can’t be more help.

amolkahat · May 29, 2024, 10:18am

Is there any roadmap to support MS Entra auth with Sonarqube CE ?

Colin · May 31, 2024, 1:09pm

To be clear, SonarQube generally supports authenticating to Microsoft SQL Servers in ways that are supported by the JDBC Driver. For example:

Use ActiveDirectoryPassword (version 6.0+) to connect to SQL using a Microsoft Entra principal name and password.

However, passwordless is not supported at this time, and not on the roadmap right now.