Skip to content

Instantly share code, notes, and snippets.

@kerin
Created December 14, 2017 14:00
Show Gist options
  • Save kerin/f4aba6574d85145bf8ba9190178c036c to your computer and use it in GitHub Desktop.
Save kerin/f4aba6574d85145bf8ba9190178c036c to your computer and use it in GitHub Desktop.
kops cluster spec:
spec:
kubeAPIServer:
oidcClientID: OIDC_CLIENT_ID
oidcIssuerURL: https://dev-analytics-moj.eu.auth0.com/
oidcUsernameClaim: sub
kerin-foo-namespace-admin-rolebinding.yml:
kind: RoleBinding
apiVersion: rbac.authorization.k8s.io/v1
metadata:
name: foo-admin
namespace: foo
subjects:
- kind: User
name: oidc:github|38736
apiGroup: rbac.authorization.k8s.io
roleRef:
kind: ClusterRole
name: admin
apiGroup: rbac.authorization.k8s.io
kubecfg:
apiVersion: v1
clusters:
- cluster:
certificate-authority-data: CA_DATA
server: https://api.kerintest.mojanalytics.xyz
name: kerintest.mojanalytics.xyz
contexts:
- context:
cluster: kerintest.mojanalytics.xyz
user: kerintest.mojanalytics.xyz-kerin
name: kerintest.mojanalytics.xyz-kerin
current-context: kerintest.mojanalytics.xyz-kerin
kind: Config
preferences: {}
users:
- name: kerintest.mojanalytics.xyz-kerin
user:
as-user-extra: {}
auth-provider:
config:
client-id: OIDC_CLIENT_ID
client-secret: OIDC_CLIENT_SECRET
idp-issuer-url: https://dev-analytics-moj.eu.auth0.com
refresh-token: OIDC_REFRESH_TOKEN
name: oidc
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment