Google oauth2 configuration is not being used

[SunSparc]

I have Kafka-UI running. I had it previous setup using the provectus code base and config. Since I migrated to the kafbat code base I was required to change some of the configurations. I must not have gotten them all changed properly because previously I would get an authentication challenge using oidc/oauth2. Now there is not authentication at all. The UI works fine, but no security at all.

Here is my environment:

env
---
SPRING_CONFIG_ADDITIONAL-LOCATION = "${NOMAD_TASK_DIR}/config.yml"

KAFKA_CLUSTERS_0_BOOTSTRAPSERVERS = "<kafka_server_address>"
KAFKA_CLUSTERS_0_PROPERTIES_SECURITY_PROTOCOL = "SSL"
KAFKA_CLUSTERS_0_PROPERTIES_SSL_TRUSTSTORE_LOCATION = "/certs/client.truststore.jks"
KAFKA_CLUSTERS_0_PROPERTIES_SSL_TRUSTSTORE_PASSWORD = "<password>"
KAFKA_CLUSTERS_0_PROPERTIES_SSL_KEYSTORE_LOCATION = "/certs/client.keystore.p12"
KAFKA_CLUSTERS_0_PROPERTIES_SSL_KEYSTORE_PASSWORD = "<password>"
KAFKA_CLUSTERS_0_PROPERTIES_SSL_KEYSTORE_TYPE = "PKCS12"

Here is my config file:

config.yml
---
kafka:
  clusters:
    - name: the-cluster-name

auth:
  type: OAUTH2
  oauth2:
    client:
      google:
        provider: google
        clientId: <client_id>
        clientSecret: <client_secret>
        redirect-uri: https://<my-domain>/login/oauth2/code/google
        user-name-attribute: email
        custom-params:
          type: google
          allowedDomain: <my-domain>

These are the resulting logs:

Standard Commons Logging discovery in action with spring-jcl: please remove commons-logging.jar from classpath in order to avoid potential conflicts
default THREAD FACTORY
 _   _ ___    __             _                _          _  __      __ _
| | | |_ _|  / _|___ _ _    /_\  _ __ __ _ __| |_  ___  | |/ /__ _ / _| |_____
| |_| || |  |  _/ _ | '_|  / _ \| '_ / _` / _| ' \/ -_) | ' </ _` |  _| / / _`|
 \___/|___| |_| \___|_|   /_/ \_| .__\__,_\__|_||_\___| |_|\_\__,_|_| |_\_\__,|
                                 |_|                                             

2024-11-28 02:59:42,231 INFO  [main] i.k.u.KafkaUiApplication: Starting KafkaUiApplication using Java 17.0.10 with PID 1 (/api.jar started by kafkaui in /)
2024-11-28 02:59:42,234 DEBUG [main] i.k.u.KafkaUiApplication: Running with Spring Boot v3.1.9, Spring v6.0.17
2024-11-28 02:59:42,234 INFO  [main] i.k.u.KafkaUiApplication: No active profile set, falling back to 1 default profile: "default"
2024-11-28 02:59:44,923 DEBUG [main] i.k.u.s.SerdesInitializer: Configuring serdes for cluster Default
2024-11-28 02:59:45,285 INFO  [main] o.s.b.a.s.r.ReactiveUserDetailsServiceAutoConfiguration: 

Using generated security password: <password>

2024-11-28 02:59:45,414 WARN  [main] i.k.u.c.a.DisabledAuthSecurityConfig: Authentication is disabled. Access will be unrestricted.
2024-11-28 02:59:45,611 INFO  [main] o.s.b.a.e.w.EndpointLinksResolver: Exposing 3 endpoint(s) beneath base path '/actuator'
2024-11-28 02:59:46,086 INFO  [main] o.s.b.w.e.n.NettyWebServer: Netty started on port 8080
2024-11-28 02:59:46,105 INFO  [main] i.k.u.KafkaUiApplication: Started KafkaUiApplication in 4.643 seconds (process running for 5.333)
2024-11-28 02:59:46,316 DEBUG [parallel-2] i.k.u.s.ClustersStatisticsScheduler: Start getting metrics for kafkaCluster: Default
2024-11-28 02:59:46,337 INFO  [parallel-2] o.a.k.c.a.AdminClientConfig: AdminClientConfig values: 
  auto.include.jmx.reporter = true
  bootstrap.servers = <kafka_server_address>
  client.dns.lookup = use_all_dns_ips
  client.id = kafbat-ui-admin-1732762786-1
  connections.max.idle.ms = 300000
  default.api.timeout.ms = 60000
  metadata.max.age.ms = 300000
  metric.reporters = []
  metrics.num.samples = 2
  metrics.recording.level = INFO
  metrics.sample.window.ms = 30000
  receive.buffer.bytes = 65536
  reconnect.backoff.max.ms = 1000
  reconnect.backoff.ms = 50
  request.timeout.ms = 30000
  retries = 2147483647
  retry.backoff.ms = 100
  sasl.client.callback.handler.class = null
  sasl.jaas.config = null
  sasl.kerberos.kinit.cmd = /usr/bin/kinit
  sasl.kerberos.min.time.before.relogin = 60000
  sasl.kerberos.service.name = null
  sasl.kerberos.ticket.renew.jitter = 0.05
  sasl.kerberos.ticket.renew.window.factor = 0.8
  sasl.login.callback.handler.class = null
  sasl.login.class = null
  sasl.login.connect.timeout.ms = null
  sasl.login.read.timeout.ms = null
  sasl.login.refresh.buffer.seconds = 300
  sasl.login.refresh.min.period.seconds = 60
  sasl.login.refresh.window.factor = 0.8
  sasl.login.refresh.window.jitter = 0.05
  sasl.login.retry.backoff.max.ms = 10000
  sasl.login.retry.backoff.ms = 100
  sasl.mechanism = GSSAPI
  sasl.oauthbearer.clock.skew.seconds = 30
  sasl.oauthbearer.expected.audience = null
  sasl.oauthbearer.expected.issuer = null
  sasl.oauthbearer.jwks.endpoint.refresh.ms = 3600000
  sasl.oauthbearer.jwks.endpoint.retry.backoff.max.ms = 10000
  sasl.oauthbearer.jwks.endpoint.retry.backoff.ms = 100
  sasl.oauthbearer.jwks.endpoint.url = null
  sasl.oauthbearer.scope.claim.name = scope
  sasl.oauthbearer.sub.claim.name = sub
  sasl.oauthbearer.token.endpoint.url = null
  security.protocol = SSL
  security.providers = null
  send.buffer.bytes = 131072
  socket.connection.setup.timeout.max.ms = 30000
  socket.connection.setup.timeout.ms = 10000
  ssl.cipher.suites = null
  ssl.enabled.protocols = [TLSv1.2, TLSv1.3]
  ssl.endpoint.identification.algorithm = https
  ssl.engine.factory.class = null
  ssl.key.password = null
  ssl.keymanager.algorithm = SunX509
  ssl.keystore.certificate.chain = null
  ssl.keystore.key = null
  ssl.keystore.location = /certs/client.keystore.p12
  ssl.keystore.password = [hidden]
  ssl.keystore.type = PKCS12
  ssl.protocol = TLSv1.3
  ssl.provider = null
  ssl.secure.random.implementation = null
  ssl.trustmanager.algorithm = PKIX
  ssl.truststore.certificates = null
  ssl.truststore.location = /certs/client.truststore.jks
  ssl.truststore.password = [hidden]
  ssl.truststore.type = JKS

2024-11-28 02:59:46,567 INFO  [parallel-2] o.a.k.c.u.AppInfoParser: Kafka version: 3.5.2
2024-11-28 02:59:46,567 INFO  [parallel-2] o.a.k.c.u.AppInfoParser: Kafka commitId: 8f0b0b0d0466632b
2024-11-28 02:59:46,567 INFO  [parallel-2] o.a.k.c.u.AppInfoParser: Kafka startTimeMs: 1732762786565
2024-11-28 02:59:47,471 DEBUG [parallel-15] i.k.u.s.ClustersStatisticsScheduler: Metrics updated for cluster: Default
2024-11-28 03:00:16,102 DEBUG [parallel-16] i.k.u.s.ClustersStatisticsScheduler: Start getting metrics for kafkaCluster: Default

[SunSparc]

I found the problem. The config actually works perfectly and it was being used. My problem was the way that the config file was being rendered on my system. I was able to see the rendered version of the config file and found it formatted incorrectly.