Compare commits
3 Commits
| Author | SHA1 | Date | |
|---|---|---|---|
| 7d6f2b0063 | |||
| eb27dcf65b | |||
| e44cf95bb2 |
@@ -13,7 +13,7 @@ spec:
|
|||||||
kind: Rule
|
kind: Rule
|
||||||
middlewares:
|
middlewares:
|
||||||
- name: keycloak-auth
|
- name: keycloak-auth
|
||||||
namespace: oauth2-proxy
|
namespace: kube-system
|
||||||
services:
|
services:
|
||||||
- name: secret-reader
|
- name: secret-reader
|
||||||
port: 80
|
port: 80
|
||||||
|
|||||||
@@ -10,10 +10,10 @@ spec:
|
|||||||
template:
|
template:
|
||||||
type: Opaque
|
type: Opaque
|
||||||
data:
|
data:
|
||||||
client_id: oauth2-proxy
|
client-id: oauth2-proxy
|
||||||
client_secret: |-
|
client-secret: |-
|
||||||
{{ .client_secret }}
|
{{ .client_secret }}
|
||||||
cookie_secret: |-
|
cookie-secret: |-
|
||||||
{{ .cookie_secret }}
|
{{ .cookie_secret }}
|
||||||
data:
|
data:
|
||||||
- secretKey: client_secret
|
- secretKey: client_secret
|
||||||
|
|||||||
@@ -3,6 +3,7 @@ apiVersion: traefik.io/v1alpha1
|
|||||||
kind: Middleware
|
kind: Middleware
|
||||||
metadata:
|
metadata:
|
||||||
name: keycloak-auth
|
name: keycloak-auth
|
||||||
|
namespace: kube-system
|
||||||
spec:
|
spec:
|
||||||
forwardAuth:
|
forwardAuth:
|
||||||
address: http://oauth2-proxy.oauth2-proxy.svc:80/oauth2/auth
|
address: http://oauth2-proxy.oauth2-proxy.svc:80/oauth2/auth
|
||||||
@@ -11,4 +12,3 @@ spec:
|
|||||||
- X-Auth-Request-User
|
- X-Auth-Request-User
|
||||||
- X-Auth-Request-Email
|
- X-Auth-Request-Email
|
||||||
- X-Auth-Request-Groups
|
- X-Auth-Request-Groups
|
||||||
- Authorization
|
|
||||||
|
|||||||
@@ -1,6 +1,7 @@
|
|||||||
replicaCount: 1
|
replicaCount: 1
|
||||||
|
|
||||||
config:
|
config:
|
||||||
|
existingSecret: oauth2-proxy-creds
|
||||||
configFile: |-
|
configFile: |-
|
||||||
provider = "keycloak-oidc"
|
provider = "keycloak-oidc"
|
||||||
provider_display_name = "Keycloak"
|
provider_display_name = "Keycloak"
|
||||||
@@ -21,23 +22,6 @@ config:
|
|||||||
code_challenge_method = "S256"
|
code_challenge_method = "S256"
|
||||||
scope = "openid profile email"
|
scope = "openid profile email"
|
||||||
|
|
||||||
extraEnv:
|
|
||||||
- name: OAUTH2_PROXY_CLIENT_ID
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
name: oauth2-proxy-creds
|
|
||||||
key: client_id
|
|
||||||
- name: OAUTH2_PROXY_CLIENT_SECRET
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
name: oauth2-proxy-creds
|
|
||||||
key: client_secret
|
|
||||||
- name: OAUTH2_PROXY_COOKIE_SECRET
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
name: oauth2-proxy-creds
|
|
||||||
key: cookie_secret
|
|
||||||
|
|
||||||
ingress:
|
ingress:
|
||||||
enabled: true
|
enabled: true
|
||||||
className: traefik
|
className: traefik
|
||||||
|
|||||||
Reference in New Issue
Block a user