Merge pull request #413 from aledbf/images
Improve external authentication docs
This commit is contained in:
commit
d9f9af7870
6 changed files with 15 additions and 1 deletions
|
@ -31,7 +31,7 @@ metadata:
|
||||||
### Example: OAuth2 Proxy + Kubernetes-Dashboard
|
### Example: OAuth2 Proxy + Kubernetes-Dashboard
|
||||||
|
|
||||||
This example will show you how to deploy [`oauth2_proxy`](https://github.com/bitly/oauth2_proxy)
|
This example will show you how to deploy [`oauth2_proxy`](https://github.com/bitly/oauth2_proxy)
|
||||||
into a Kubernetes cluster and use it to protect the Kubernetes Dashboard.
|
into a Kubernetes cluster and use it to protect the Kubernetes Dashboard using github as oAuth2 provider
|
||||||
|
|
||||||
#### Prepare:
|
#### Prepare:
|
||||||
|
|
||||||
|
@ -43,9 +43,16 @@ kubectl create -f https://raw.githubusercontent.com/kubernetes/kops/master/addon
|
||||||
|
|
||||||
2. Create a custom Github OAuth application https://github.com/settings/applications/new
|
2. Create a custom Github OAuth application https://github.com/settings/applications/new
|
||||||
|
|
||||||
|

|
||||||
|
|
||||||
|
|
||||||
- Homepage URL is the FQDN in the Ingress rule, like `https://foo.bar.com`
|
- Homepage URL is the FQDN in the Ingress rule, like `https://foo.bar.com`
|
||||||
- Authorization callback URL is the same as the base FQDN plus `/oauth2`, like `https://foo.bar.com/oauth2`
|
- Authorization callback URL is the same as the base FQDN plus `/oauth2`, like `https://foo.bar.com/oauth2`
|
||||||
|
|
||||||
|
|
||||||
|

|
||||||
|
|
||||||
|
|
||||||
3. Configure oauth2_proxy values in the file oauth2-proxy.yaml with the values:
|
3. Configure oauth2_proxy values in the file oauth2-proxy.yaml with the values:
|
||||||
|
|
||||||
- OAUTH2_PROXY_CLIENT_ID with the github `<Client ID>`
|
- OAUTH2_PROXY_CLIENT_ID with the github `<Client ID>`
|
||||||
|
@ -62,3 +69,10 @@ $ kubectl create -f oauth2-proxy.yaml,dashboard-ingress.yaml
|
||||||
```
|
```
|
||||||
|
|
||||||
Test the oauth integration accessing the configured URL, like `https://foo.bar.com`
|
Test the oauth integration accessing the configured URL, like `https://foo.bar.com`
|
||||||
|
|
||||||
|
|
||||||
|

|
||||||
|
|
||||||
|

|
||||||
|
|
||||||
|

|
||||||
|
|
BIN
examples/external-auth/nginx/images/dashboard.png
Normal file
BIN
examples/external-auth/nginx/images/dashboard.png
Normal file
Binary file not shown.
After Width: | Height: | Size: 86 KiB |
BIN
examples/external-auth/nginx/images/github-auth.png
Normal file
BIN
examples/external-auth/nginx/images/github-auth.png
Normal file
Binary file not shown.
After Width: | Height: | Size: 16 KiB |
BIN
examples/external-auth/nginx/images/oauth-login.png
Normal file
BIN
examples/external-auth/nginx/images/oauth-login.png
Normal file
Binary file not shown.
After Width: | Height: | Size: 37 KiB |
BIN
examples/external-auth/nginx/images/regiter-oauth-app-2.png
Normal file
BIN
examples/external-auth/nginx/images/regiter-oauth-app-2.png
Normal file
Binary file not shown.
After Width: | Height: | Size: 90 KiB |
BIN
examples/external-auth/nginx/images/regiter-oauth-app.png
Normal file
BIN
examples/external-auth/nginx/images/regiter-oauth-app.png
Normal file
Binary file not shown.
After Width: | Height: | Size: 84 KiB |
Loading…
Reference in a new issue