kube/oidc-gateway/whoami.yml

77 lines
1.5 KiB
YAML

---
apiVersion: apps/v1
kind: Deployment
metadata:
name: whoami
spec:
replicas: 1
revisionHistoryLimit: 0
selector:
matchLabels:
app: whoami
template:
metadata:
labels:
app: whoami
spec:
containers:
- image: traefik/whoami
name: whoami
ports:
- containerPort: 80
protocol: TCP
---
apiVersion: v1
kind: Service
metadata:
name: whoami
labels:
app: whoami
spec:
type: ClusterIP
selector:
app: whoami
ports:
- name: whoami-http
port: 80
targetPort: 80
---
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
name: whoami
annotations:
external-dns.alpha.kubernetes.io/target: traefik.k-space.ee
kubernetes.io/ingress.class: traefik
traefik.ingress.kubernetes.io/router.entrypoints: websecure
traefik.ingress.kubernetes.io/router.tls: "true"
traefik.ingress.kubernetes.io/router.middlewares: oidc-gateway-whoami@kubernetescrd
spec:
tls:
- hosts:
- "*.k-space.ee"
rules:
- host: "whoami.k-space.ee"
http:
paths:
- pathType: Prefix
path: /
backend:
service:
name: whoami
port:
number: 80
---
apiVersion: codemowers.io/v1alpha1
kind: OIDCGWMiddlewareClient
metadata:
name: whoami
spec:
displayName: Who-Am-I
uri: 'https://whoami.k-space.ee'
headerMapping:
email: Remote-Email
groups: Remote-Groups
name: Remote-Name
user: Remote-Username