Dustin C. Hatch
24465dc7da
Enabling OpenID Connect authentication for the Kubernetes API server will allow clients, particularly `kubectl` to log in without needing TLS certificates and private keys.
28 lines
489 B
YAML
28 lines
489 B
YAML
apiVersion: kustomize.config.k8s.io/v1beta1
|
|
kind: Kustomization
|
|
|
|
resources:
|
|
- authelia.yaml
|
|
- oidc-cluster-admin.yaml
|
|
|
|
configMapGenerator:
|
|
- name: authelia
|
|
namespace: authelia
|
|
files:
|
|
- configuration.yml
|
|
options:
|
|
disableNameSuffixHash: true
|
|
|
|
secretGenerator:
|
|
- name: authelia
|
|
namespace: authelia
|
|
files:
|
|
- jwt.secret
|
|
- ldap.password
|
|
- session.secret
|
|
- storage.encryption_key
|
|
- oidc.hmac_secret
|
|
- oidc.issuer_private_key
|
|
options:
|
|
disableNameSuffixHash: true
|