diff --git a/addons/dex-k8s-authenticator/1.1.x/dex-k8s-authenticator-6.yaml b/addons/dex-k8s-authenticator/1.1.x/dex-k8s-authenticator-6.yaml new file mode 100644 index 00000000..45ff0a4a --- /dev/null +++ b/addons/dex-k8s-authenticator/1.1.x/dex-k8s-authenticator-6.yaml @@ -0,0 +1,86 @@ +--- +apiVersion: kubeaddons.mesosphere.io/v1beta1 +kind: Addon +metadata: + name: dex-k8s-authenticator + namespace: kubeaddons + labels: + kubeaddons.mesosphere.io/name: dex-k8s-authenticator + annotations: + catalog.kubeaddons.mesosphere.io/addon-revision: "1.1.1-6" + appversion.kubeaddons.mesosphere.io/dex-k8s-authenticator: "v1.1.1" + values.chart.helm.kubeaddons.mesosphere.io/dex-k8s-authenticator: "https://raw.githubusercontent.com/mesosphere/charts/f44c645c6bc843b254bb0f4f97d516f2cfee4707/staging/dex-k8s-authenticator/values.yaml" +spec: + kubernetes: + minSupportedVersion: v1.15.6 + cloudProvider: + - name: aws + enabled: true + - name: azure + enabled: true + - name: gcp + enabled: true + - name: docker + enabled: true + - name: none + enabled: true + requires: + - matchLabels: + kubeaddons.mesosphere.io/name: dex + - matchLabels: + kubeaddons.mesosphere.io/provides: ingresscontroller + chartReference: + chart: dex-k8s-authenticator + repo: https://mesosphere.github.io/charts/staging + version: 1.1.17 + values: | + --- + image: + repository: mesosphere/dex-k8s-authenticator + tag: v1.1.2-d2iq + ingress: + enabled: true + annotations: + kubernetes.io/ingress.class: traefik + path: /token + hosts: + - "" + dexK8sAuthenticator: + #logoUrl: http:// + #tlsCert: /path/to/dex-client.crt + #tlsKey: /path/to/dex-client.key + pluginVersion: "v0.1.1" + clusters: + - name: kubernetes-cluster + short_description: "Kubernetes cluster" + description: "Kubernetes cluster authenticator" + # client_secret: value is generated automatically via initContainers + client_id: kube-apiserver + issuer: https://dex-kubeaddons.kubeaddons.svc.cluster.local:8080/dex + # This URI is just a placeholder and it will be replaced during initContainers + # with a URL pointing to the traefik ingress public load balancer. + redirect_uri: https://dex-k8s-authenticator-kubeaddons.kubeaddons.svc.cluster.local:5555/token/callback/kubernetes-cluster + resources: + requests: + cpu: 100m + memory: 128Mi + deploymentAnnotations: + # The certificate can change because it was rotated or different cluster + # DNS name has been set. + secret.reloader.stakater.com/reload: "traefik-kubeaddons-certificate" + configmap.reloader.stakater.com/reload: "dex-k8s-authenticator-kubeaddons" + initContainers: + - name: initialize-dka-config + image: mesosphere/kubeaddons-addon-initializer:v0.2.8 + args: ["dexK8sAuthenticator"] + env: + - name: "DKA_CONFIGMAP_NAME" + value: "dex-k8s-authenticator-kubeaddons" + - name: "DKA_NAMESPACE" + value: "kubeaddons" + - name: "DKA_INGRESS_NAMESPACE" + value: "kubeaddons" + - name: "DKA_INGRESS_SERVICE_NAME" + value: "traefik-kubeaddons" + - name: "DKA_WEB_PREFIX_PATH" + value: "/token"