# Pmm static send authorize/?client\_id=some\_id

**URL:** <https://forums.percona.com/t/pmm-static-send-authorize-client-id-some-id/37833>\
**Category:** Percona Monitoring and Management (PMM)\
**Tags:** pmm\
**Created:** [May 5, 2025, 3:05pm UTC](https://forums.percona.com/t/pmm-static-send-authorize-client-id-some-id/37833 "2025-05-05T15:05:13Z")\
**Posts on this page:** 10\
**Page:** 1

<div class="post-metadata">

**Author:** ![ildarmurtaev](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/ildarmurtaev/32/20750_2.png) [@ildarmurtaev](https://forums.percona.com/u/ildarmurtaev)\
**Post date:** [May 5, 2025, 3:05pm UTC](https://forums.percona.com/t/pmm-static-send-authorize-client-id-some-id/37833/1 "2025-05-05T15:05:13Z")

</div>

## Description:

pmm not send value GF\_AUTH\_GENERIC\_OAUTH\_CLIENT\_ID  
sends a static value “some\_id”

## Steps to Reproduce:

add idc helm values  
GF\_AUTH\_GENERIC\_OAUTH\_CLIENT\_ID: ‘cG1t’  
GF\_AUTH\_GENERIC\_OAUTH\_CLIENT\_SECRET: ‘\*’

complete authentication PMM

## Version:

pmm3, chart pmm@1.4.1

## Logs:

[https://domain.ru/application/o/authorize/?client\_id=some\_id&redirect\_uri=https%3A%2F%2Fpmm.ru%2Fgraph%2Flogin%2Fgeneric\_oauth&response\_type=code&scope=openid+profile+email+offline\_access+groups&state=7LhSBgy5](https://domain.ru/application/o/authorize/?client_id=some_id&redirect_uri=https%3A%2F%2Fpmm.ru%2Fgraph%2Flogin%2Fgeneric_oauth&response_type=code&scope=openid+profile+email+offline_access+groups&state=7LhSBgy5)

## Expected Result:

_authorize/?client\_id=pmm_

## Actual Result:

_authorize/?client\_id=some\_id_

---

<div class="post-metadata">

**Author:** ![ildarmurtaev](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/ildarmurtaev/32/20750_2.png) [@ildarmurtaev](https://forums.percona.com/u/ildarmurtaev)\
**Post date:** [May 6, 2025, 8:35am UTC](https://forums.percona.com/t/pmm-static-send-authorize-client-id-some-id/37833/2 "2025-05-06T08:35:24Z")

</div>

![image](https://us1.discourse-cdn.com/flex019/uploads/percona1/original/3X/5/4/54764d6f0647215a8bff4e8409b53ba1f4a41a8e.png)  
these values are not passed from helm

---

<div class="post-metadata">

**Author:** ![nurlan](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/nurlan/32/1523_2.png) [@nurlan](https://forums.percona.com/u/nurlan)\
**Post date:** [May 6, 2025, 9:00am UTC](https://forums.percona.com/t/pmm-static-send-authorize-client-id-some-id/37833/3 "2025-05-06T09:00:45Z")

</div>

Hi,  
Can you check if secret.create set to true in values.yml?  
Can you try to set this value in pmmEnv?

---

<div class="post-metadata">

**Author:** ![ildarmurtaev](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/ildarmurtaev/32/20750_2.png) [@ildarmurtaev](https://forums.percona.com/u/ildarmurtaev)\
**Post date:** [May 6, 2025, 10:02am UTC](https://forums.percona.com/t/pmm-static-send-authorize-client-id-some-id/37833/4 "2025-05-06T10:02:15Z")

</div>

hi, i added secret.create: true and redeploy pod, but nothing has changed.

```
secret:
  create: true
  name: pmm-secret
  pmm_password: "test"

  GF_AUTH_GENERIC_OAUTH_CLIENT_ID: 'cG1t'
  GF_AUTH_GENERIC_OAUTH_CLIENT_SECRET: '*'

```

if look at secrets, it creates, but values no passed grafana  
I can only change the value in UI grafana, then it works

 ![image](https://us1.discourse-cdn.com/flex019/uploads/percona1/original/3X/3/2/32e96ac5e1023ce79d5e3619447eff34944a84b0.png)  
 ![image](https://us1.discourse-cdn.com/flex019/uploads/percona1/original/3X/9/4/94e75d6dbe1afb28d90634d1f446dc58912fe8ce.png)

---

<div class="post-metadata">

**Author:** ![Danny\_Sauer](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/danny_sauer/32/21158_2.png) [@Danny\_Sauer](https://forums.percona.com/u/Danny_Sauer)\
**Post date:** [May 30, 2025, 7:59pm UTC](https://forums.percona.com/t/pmm-static-send-authorize-client-id-some-id/37833/5 "2025-05-30T19:59:54Z")

</div>

The logic in the helm chart seems broken (or “is more secure”, whichever ;)).

> <https://github.com/percona/percona-helm-charts/blob/db195312c2d5d7dbec2619995c45b77fa9ea8780/charts/pmm/templates/statefulset.yaml#L63C1-L66C22>

and

> <https://github.com/percona/percona-helm-charts/blob/main/charts/pmm/templates/statefulset.yaml#L72C1-L80C1>

The secret with the client ID and Secret is only loaded into the environment if create\_secret is false. If create secret is true, then only the random generated password field is loaded from the secret; the rest of the secret is ignored.

---

<div class="post-metadata">

**Author:** ![nurlan](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/nurlan/32/1523_2.png) [@nurlan](https://forums.percona.com/u/nurlan)\
**Post date:** [June 2, 2025, 5:39am UTC](https://forums.percona.com/t/pmm-static-send-authorize-client-id-some-id/37833/6 "2025-06-02T05:39:46Z")

</div>

if secret.create is true, probably it rewrites your secret.

---

<div class="post-metadata">

**Author:** ![Danny\_Sauer](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/danny_sauer/32/21158_2.png) [@Danny\_Sauer](https://forums.percona.com/u/Danny_Sauer)\
**Post date:** [June 5, 2025, 2:35am UTC](https://forums.percona.com/t/pmm-static-send-authorize-client-id-some-id/37833/7 "2025-06-05T02:35:22Z")

</div>

Well, it’d try to rewrite, and then k8s would say “whoa, there’s already a resource with that name” and the helm install would fail. 😉 But that’s pretty reasonable if someone says “create a secret” when they actually already have a secret.

---

<div class="post-metadata">

**Author:** ![ildarmurtaev](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/ildarmurtaev/32/20750_2.png) [@ildarmurtaev](https://forums.percona.com/u/ildarmurtaev)\
**Post date:** [June 6, 2025, 1:19pm UTC](https://forums.percona.com/t/pmm-static-send-authorize-client-id-some-id/37833/8 "2025-06-06T13:19:16Z")

</div>

if secret.create is false. Deploy not work, error: Error: secret “pmm-secret” not found

---

<div class="post-metadata">

**Author:** ![nurlan](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/nurlan/32/1523_2.png) [@nurlan](https://forums.percona.com/u/nurlan)\
**Post date:** [June 8, 2025, 3:06pm UTC](https://forums.percona.com/t/pmm-static-send-authorize-client-id-some-id/37833/9 "2025-06-08T15:06:17Z")

</div>

You should create secret with name `pmm-secret` first and then run helm install

---

<div class="post-metadata">

**Author:** ![ildarmurtaev](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/ildarmurtaev/32/20750_2.png) [@ildarmurtaev](https://forums.percona.com/u/ildarmurtaev)\
**Post date:** [June 9, 2025, 11:34am UTC](https://forums.percona.com/t/pmm-static-send-authorize-client-id-some-id/37833/10 "2025-06-09T11:34:13Z")

</div>

Thanks guys, it’s working.
