initial commit

example/client.yaml

@@ -0,0 +1,9 @@
+kind: OAuth2Client
+apiVersion: oauth2clients.oidc.coreos.com/v1
+metadata:
+  name: example-app
+  namespace: default
+secret: ZXhhbXBsZS1hcHAtc2VjcmV0
+redirectURIs:
+- http://127.0.0.1:5555/callback
+name: Example App

example/config.yaml

@@ -0,0 +1,20 @@
+issuer: http://127.0.0.1:5556
+storage:
+  type: kubernetes
+
+web:
+  http: 127.0.0.1:5556
+
+connectors:
+- type: mock
+  id: mock
+  name: Mock
+
+- type: github
+  id: github
+  name: GitHub
+  config:
+    clientID: "$GITHUB_CLIENT_ID"
+    clientSecret: "$GITHUB_CLIENT_SECRET"
+    redirectURI: http://127.0.0.1:5556/callback/github
+    org: kubernetes

example/thirdpartyresources.yaml

@@ -0,0 +1,48 @@
+# NOTE: Because of a bug in third party resources, each resource must be in it's
+# own API Group.
+#
+# See fix at https://github.com/kubernetes/kubernetes/pull/28414
+
+metadata:
+  name: auth-code.authcodes.oidc.coreos.com
+apiVersion: extensions/v1beta1
+kind: ThirdPartyResource
+description: "A code which can be claimed for an access token."
+versions:
+- name: v1
+---
+
+metadata:
+  name: auth-request.authrequests.oidc.coreos.com
+apiVersion: extensions/v1beta1
+kind: ThirdPartyResource
+description: "A request for an end user to authorize a client."
+versions:
+- name: v1
+---
+
+metadata:
+  name: o-auth2-client.oauth2clients.oidc.coreos.com
+apiVersion: extensions/v1beta1
+kind: ThirdPartyResource
+description: "An OpenID Connect client."
+versions:
+- name: v1
+---
+
+metadata:
+  name: signing-key.signingkeies.oidc.coreos.com
+apiVersion: extensions/v1beta1
+kind: ThirdPartyResource
+description: "Keys used to sign and verify OpenID Connect tokens."
+versions:
+- name: v1
+---
+
+metadata:
+  name: refresh-token.refreshtokens.oidc.coreos.com
+apiVersion: extensions/v1beta1
+kind: ThirdPartyResource
+description: "Refresh tokens for clients to continuously act on behalf of an end user."
+versions:
+- name: v1