Skip to content

docs(analytics): PLTF-3531 add Keycloak auth values for Laminar Helm install - #775

Open
aivong-openhands wants to merge 2 commits into
mainfrom
docs/analytics-laminar-keycloak-auth
Open

docs(analytics): PLTF-3531 add Keycloak auth values for Laminar Helm install#775
aivong-openhands wants to merge 2 commits into
mainfrom
docs/analytics-laminar-keycloak-auth

Conversation

@aivong-openhands

@aivong-openhands aivong-openhands commented Sep 1, 2026

Copy link
Copy Markdown
Contributor
  • I have read and reviewed the documentation changes to the best of my ability.
  • If the change is significant, I have run the documentation site locally and confirmed it renders as expected.

Summary of changes

Enabling Laminar analytics through Helm previously left authentication unconfigured, so the Continue with Keycloak button on the self-hosted Laminar UI had no working provider and login failed. This documents the values that point the Laminar frontend at the same Keycloak realm as OpenHands Enterprise, in the Kubernetes (Helm) tab of the Analytics page.

  • Under laminar.frontend, adds nextauthUrl/nextPublicUrl and the AUTH_KEYCLOAK_ID/AUTH_KEYCLOAK_SECRET/AUTH_KEYCLOAK_ISSUER env, with the client id and secret sourced from the chart-managed keycloak-realm Secret and the issuer pointing at the allhands realm.
  • Adds a note that the Keycloak client's redirect URI and web origin must match the analytics hostname; a mismatch — commonly the single-level versus nested hostname layout — makes login fail with Invalid parameter: redirect_uri.

Verified against a live OpenHands Enterprise Helm deployment: the documented values produce a working Keycloak login, and the redirect-URI note reproduces the exact failure it warns about. Every value uses a generic placeholder, so no environment-specific hostnames or secrets appear in the page.

This PR was drafted by an AI agent on behalf of the user.

Add the Keycloak auth values (nextauthUrl/nextPublicUrl plus AUTH_KEYCLOAK_ID/
SECRET/ISSUER sourced from the chart-managed keycloak-realm Secret) to the
Kubernetes (Helm) Laminar frontend example, and document the Keycloak client
redirect URI / web origin required for the Continue with Keycloak flow.

Co-authored-by: openhands <openhands@all-hands.dev>
@mintlify

mintlify Bot commented Sep 1, 2026

Copy link
Copy Markdown

Preview deployment for your docs. Learn more about Mintlify Previews.

Project Status Preview Updated (UTC)
all-hands-ai 🟢 Ready View Preview Sep 1, 2026, 10:49 PM

💡 Tip: Enable Workflows to automatically generate PRs for you.

@aivong-openhands aivong-openhands changed the title docs(analytics): add Keycloak auth values for Laminar Helm install docs(analytics): PLTF-3531 add Keycloak auth values for Laminar Helm install Sep 1, 2026
Co-authored-by: openhands <openhands@all-hands.dev>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant