forked from mystiq/dex
107 lines
2.3 KiB
YAML
107 lines
2.3 KiB
YAML
|
apiVersion: extensions/v1beta1
|
||
|
|
kind: Deployment
|
||
|
|
metadata:
|
||
|
|
labels:
|
||
|
|
app: dex
|
||
|
|
name: dex
|
||
|
|
spec:
|
||
|
|
replicas: 3
|
||
|
|
template:
|
||
|
|
metadata:
|
||
|
|
labels:
|
||
|
|
app: dex
|
||
|
|
spec:
|
||
|
|
containers:
|
||
|
|
- image: quay.io/coreos/dex:v2.0.0-beta.1
|
||
|
|
name: dex
|
||
|
|
command: ["/usr/local/bin/dex", "serve", "/etc/dex/cfg/config.yaml"]
|
||
|
|
|
||
|
|
ports:
|
||
|
|
- name: https
|
||
|
|
containerPort: 5556
|
||
|
|
|
||
|
|
volumeMounts:
|
||
|
|
- name: config
|
||
|
|
mountPath: /etc/dex/cfg
|
||
|
|
- name: tls
|
||
|
|
mountPath: /etc/dex/tls
|
||
|
|
|
||
|
|
env:
|
||
|
|
- name: GITHUB_CLIENT_ID
|
||
|
|
valueFrom:
|
||
|
|
secretKeyRef:
|
||
|
|
name: github-client
|
||
|
|
key: client-id
|
||
|
|
- name: GITHUB_CLIENT_SECRET
|
||
|
|
valueFrom:
|
||
|
|
secretKeyRef:
|
||
|
|
name: github-client
|
||
|
|
key: client-secret
|
||
|
|
volumes:
|
||
|
|
- name: config
|
||
|
|
configMap:
|
||
|
|
name: dex
|
||
|
|
items:
|
||
|
|
- key: config.yaml
|
||
|
|
path: config.yaml
|
||
|
|
- name: tls
|
||
|
|
secret:
|
||
|
|
secretName: dex.example.com.tls
|
||
|
|
---
|
||
|
|
kind: ConfigMap
|
||
|
|
apiVersion: v1
|
||
|
|
metadata:
|
||
|
|
name: dex
|
||
|
|
data:
|
||
|
|
config.yaml: |
|
||
|
|
issuer: https://dex.example.com:32000
|
||
|
|
storage:
|
||
|
|
type: kubernetes
|
||
|
|
config:
|
||
|
|
inCluster: true
|
||
|
|
web:
|
||
|
|
https: 0.0.0.0:5556
|
||
|
|
tlsCert: /etc/dex/tls/tls.crt
|
||
|
|
tlsKey: /etc/dex/tls/tls.key
|
||
|
|
connectors:
|
||
|
|
- type: github
|
||
|
|
id: github
|
||
|
|
name: GitHub
|
||
|
|
config:
|
||
|
|
clientID: $GITHUB_CLIENT_ID
|
||
|
|
clientSecret: $GITHUB_CLIENT_SECRET
|
||
|
|
redirectURI: https://dex.example.com:32000/callback
|
||
|
|
org: kubernetes
|
||
|
|
oauth2:
|
||
|
|
skipApprovalScreen: true
|
||
|
|
|
||
|
|
staticClients:
|
||
|
|
- id: example-app
|
||
|
|
redirectURIs:
|
||
|
|
- 'http://127.0.0.1:5555/callback'
|
||
|
|
name: 'Example App'
|
||
|
|
secret: ZXhhbXBsZS1hcHAtc2VjcmV0
|
||
|
|
|
||
|
|
enablePasswordDB: true
|
||
|
|
staticPasswords:
|
||
|
|
- email: "admin@example.com"
|
||
|
|
# bcrypt hash of the string "password"
|
||
|
|
hash: "$2a$10$33EMT0cVYVlPy6WAMCLsceLYjWhuHpbz5yuZxu/GAFj03J9Lytjuy"
|
||
|
|
username: "admin"
|
||
|
|
userID: "08a8684b-db88-4b73-90a9-3cd1661f5466"
|
||
|
|
---
|
||
|
|
apiVersion: v1
|
||
|
|
kind: Service
|
||
|
|
metadata:
|
||
|
|
name: dex
|
||
|
|
spec:
|
||
|
|
type: NodePort
|
||
|
|
ports:
|
||
|
|
- name: dex
|
||
|
|
port: 5556
|
||
|
|
protocol: TCP
|
||
|
|
targetPort: 5556
|
||
|
|
nodePort: 32000
|
||
|
|
selector:
|
||
|
|
app: dex
|