update example/k8s/dex.yaml
Signed-off-by: IM CHAECHEOL <dlacocjf32@gmail.com>
This commit is contained in:
parent
bae6bbb171
commit
f2fcb2c989
@ -1,11 +1,21 @@
|
|||||||
apiVersion: extensions/v1beta1
|
---
|
||||||
|
apiVersion: v1
|
||||||
|
kind: Namespace
|
||||||
|
metadata:
|
||||||
|
name: dex
|
||||||
|
---
|
||||||
|
apiVersion: apps/v1
|
||||||
kind: Deployment
|
kind: Deployment
|
||||||
metadata:
|
metadata:
|
||||||
labels:
|
labels:
|
||||||
app: dex
|
app: dex
|
||||||
name: dex
|
name: dex
|
||||||
|
namespace: dex
|
||||||
spec:
|
spec:
|
||||||
replicas: 3
|
replicas: 3
|
||||||
|
selector:
|
||||||
|
matchLabels:
|
||||||
|
app: dex
|
||||||
template:
|
template:
|
||||||
metadata:
|
metadata:
|
||||||
labels:
|
labels:
|
||||||
@ -13,7 +23,7 @@ spec:
|
|||||||
spec:
|
spec:
|
||||||
serviceAccountName: dex # This is created below
|
serviceAccountName: dex # This is created below
|
||||||
containers:
|
containers:
|
||||||
- image: quay.io/dexidp/dex:v2.10.0
|
- image: dexidp/dex:v2.27.0 #or quay.io/dexidp/dex:v2.26.0
|
||||||
name: dex
|
name: dex
|
||||||
command: ["/usr/local/bin/dex", "serve", "/etc/dex/cfg/config.yaml"]
|
command: ["/usr/local/bin/dex", "serve", "/etc/dex/cfg/config.yaml"]
|
||||||
|
|
||||||
@ -38,6 +48,11 @@ spec:
|
|||||||
secretKeyRef:
|
secretKeyRef:
|
||||||
name: github-client
|
name: github-client
|
||||||
key: client-secret
|
key: client-secret
|
||||||
|
|
||||||
|
readinessProbe:
|
||||||
|
httpGet:
|
||||||
|
path: /healthz
|
||||||
|
port: 5556
|
||||||
volumes:
|
volumes:
|
||||||
- name: config
|
- name: config
|
||||||
configMap:
|
configMap:
|
||||||
@ -53,6 +68,7 @@ kind: ConfigMap
|
|||||||
apiVersion: v1
|
apiVersion: v1
|
||||||
metadata:
|
metadata:
|
||||||
name: dex
|
name: dex
|
||||||
|
namespace: dex
|
||||||
data:
|
data:
|
||||||
config.yaml: |
|
config.yaml: |
|
||||||
issuer: https://dex.example.com:32000
|
issuer: https://dex.example.com:32000
|
||||||
@ -95,6 +111,7 @@ apiVersion: v1
|
|||||||
kind: Service
|
kind: Service
|
||||||
metadata:
|
metadata:
|
||||||
name: dex
|
name: dex
|
||||||
|
namespace: dex
|
||||||
spec:
|
spec:
|
||||||
type: NodePort
|
type: NodePort
|
||||||
ports:
|
ports:
|
||||||
@ -112,8 +129,9 @@ metadata:
|
|||||||
labels:
|
labels:
|
||||||
app: dex
|
app: dex
|
||||||
name: dex
|
name: dex
|
||||||
|
namespace: dex
|
||||||
---
|
---
|
||||||
apiVersion: rbac.authorization.k8s.io/v1beta1
|
apiVersion: rbac.authorization.k8s.io/v1
|
||||||
kind: ClusterRole
|
kind: ClusterRole
|
||||||
metadata:
|
metadata:
|
||||||
name: dex
|
name: dex
|
||||||
@ -125,7 +143,7 @@ rules:
|
|||||||
resources: ["customresourcedefinitions"]
|
resources: ["customresourcedefinitions"]
|
||||||
verbs: ["create"] # To manage its own resources, dex must be able to create customresourcedefinitions
|
verbs: ["create"] # To manage its own resources, dex must be able to create customresourcedefinitions
|
||||||
---
|
---
|
||||||
apiVersion: rbac.authorization.k8s.io/v1beta1
|
apiVersion: rbac.authorization.k8s.io/v1
|
||||||
kind: ClusterRoleBinding
|
kind: ClusterRoleBinding
|
||||||
metadata:
|
metadata:
|
||||||
name: dex
|
name: dex
|
||||||
@ -136,4 +154,4 @@ roleRef:
|
|||||||
subjects:
|
subjects:
|
||||||
- kind: ServiceAccount
|
- kind: ServiceAccount
|
||||||
name: dex # Service account assigned to the dex pod, created above
|
name: dex # Service account assigned to the dex pod, created above
|
||||||
namespace: default # The namespace dex is running in
|
namespace: dex # The namespace dex is running in
|
||||||
|
Reference in New Issue
Block a user