Add Active Directory and kubeloing integration sample.
This commit is contained in:
		
							
								
								
									
										58
									
								
								examples/config-ad-kubelogin.yaml
									
									
									
									
									
										Normal file
									
								
							
							
						
						
									
										58
									
								
								examples/config-ad-kubelogin.yaml
									
									
									
									
									
										Normal file
									
								
							| @@ -0,0 +1,58 @@ | |||||||
|  | # Active Directory and kubelogin Integration sample | ||||||
|  | issuer: https://dex.example.com:32000/dex | ||||||
|  | storage: | ||||||
|  |   type: sqlite3 | ||||||
|  |   config: | ||||||
|  |     file: examples/dex.db | ||||||
|  | web: | ||||||
|  |   https: 0.0.0.0:32000 | ||||||
|  |   tlsCert: openid-ca.pem | ||||||
|  |   tlsKey: openid-key.pem | ||||||
|  |  | ||||||
|  | connectors: | ||||||
|  | - type: ldap | ||||||
|  |   name: OpenLDAP | ||||||
|  |   id: ldap | ||||||
|  |   config: | ||||||
|  |     host: localhost:636 | ||||||
|  |  | ||||||
|  |     # No TLS for this setup. | ||||||
|  |     insecureNoSSL: false | ||||||
|  |     insecureSkipVerify: true | ||||||
|  |  | ||||||
|  |     # This would normally be a read-only user. | ||||||
|  |     bindDN: cn=Administrator,cn=users,dc=example,dc=com | ||||||
|  |     bindPW: admin0! | ||||||
|  |  | ||||||
|  |     usernamePrompt: Email Address | ||||||
|  |  | ||||||
|  |     userSearch: | ||||||
|  |       baseDN: cn=Users,dc=example,dc=com | ||||||
|  |       filter: "(objectClass=person)" | ||||||
|  |       username: userPrincipalName | ||||||
|  |       # "DN" (case sensitive) is a special attribute name. It indicates that | ||||||
|  |       # this value should be taken from the entity's DN not an attribute on | ||||||
|  |       # the entity. | ||||||
|  |       idAttr: DN | ||||||
|  |       emailAttr: userPrincipalName | ||||||
|  |       nameAttr: cn | ||||||
|  |  | ||||||
|  |     groupSearch: | ||||||
|  |       baseDN: cn=Users,dc=example,dc=com | ||||||
|  |       filter: "(objectClass=group)" | ||||||
|  |  | ||||||
|  |       # A user is a member of a group when their DN matches | ||||||
|  |       # the value of a "member" attribute on the group entity. | ||||||
|  |       userAttr: DN | ||||||
|  |       groupAttr: member | ||||||
|  |  | ||||||
|  |       # The group name should be the "cn" value. | ||||||
|  |       nameAttr: cn | ||||||
|  |  | ||||||
|  | staticClients: | ||||||
|  | - id: kubernetes | ||||||
|  |   redirectURIs: | ||||||
|  |   - 'http://localhost:8000' | ||||||
|  |   name: 'Kubernetes' | ||||||
|  |   secret: ZXhhbXBsZS1hcHAtc2VjcmV0 | ||||||
|  |  | ||||||
		Reference in New Issue
	
	Block a user