-
Notifications
You must be signed in to change notification settings - Fork 5
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
@ #11 | should add docs how to get SSO work with Dex #35
Conversation
I've reviewed! @hoavt please check grammar and review |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
@hoatle please check my comments.
docs/sso.md
Outdated
# SSO (Single Sign On with Kubernetes) | ||
|
||
This guide will help you to set up SSO for k8s. You should set up a local k8s to test this on local | ||
by following https://github.com/teracyhq-incubator/teracy-dev-entry-k8s#how-to-use |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
should have a full stop at the end of the sentence
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
by following: <link>
docs/sso.md
Outdated
## Domain Aliases | ||
|
||
We're going to deploy dex (auth.k8s.local) and dex-k8s-authenticator (login.k8s.local) helm charts, | ||
so make sure to configure these domain aliases (see https://github.com/teracyhq-incubator/teracy-dev-entry-k8s#domain-aliases) |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
should have a full stop at the end of the sentence
docs/sso.md
Outdated
$ helm upgrade --install --namespace dex dex stable/dex -f dex.yaml | ||
``` | ||
|
||
After that, `https://auth.k8s.local/.well-known/openid-configuration` should display info such as: |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
display the info like this:
docs/sso.md
Outdated
|
||
`$ kubectl -n dex get configmaps dex-web-server-ca -o yaml` to see the dex CA root certifcate that | ||
the k8s api server must trust and the dex client apps must trust when the self-signed certificate is | ||
used for the dex deployment. Create `sso/dex-ca.pem` file from the config map data above. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Create the sso/dex-ca.pem
file
docs/sso.md
Outdated
|
||
## Configure the k8s api server | ||
|
||
Set the ansible config, through the `workspace/inventory/group_vars/k8s-cluster/k8s-cluster.yaml` or though the teracy-dev-k8s host_vars config: |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
config --> configuration
docs/sso.md
Outdated
helm upgrade --install --namespace dex login charts/dex-k8s-authenticator -f dex-k8s-authenticator.yaml | ||
``` | ||
|
||
and open https://login.k8s.local for the k8s login instruction |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Should have a full stop at the end of the sentence.
…x: apply review comments
@hoavt review comments applied, pls continue the review. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
It's Ok to merge.
connect #11
assigned to @hieptranquoc to review the technical content, @hoavt to review the English grammar.