strongant

package com.cem.oauth2.configuration.feign;

import com.cem.oauth2.configuration.AuthProperties;
import feign.RequestInterceptor;
import org.keycloak.OAuth2Constants;
import org.springframework.cloud.security.oauth2.client.feign.OAuth2FeignRequestInterceptor;
import org.springframework.context.annotation.Bean;
import org.springframework.context.annotation.Configuration;
import org.springframework.security.oauth2.client.DefaultOAuth2ClientContext;
import org.springframework.security.oauth2.client.resource.OAuth2ProtectedResourceDetails;

strongant

This gist describes the configuration required for Spring reactive WebClient to make a call to an OAuth2 protected resource through OAuth2.0 Client Credentials Grant Type Flow.

Assumption is that the Authorization Server supports OpenId Connect 1.0 specifications.

strongant

public static String post(String urlString, String params, int timeout) throws Exception {
    String response = null;
        
    HttpURLConnection conn = null;
    DataOutputStream dos = null;
    InputStream is = null;
    try {
        URL url = new URL(urlString);
        conn = (HttpURLConnection)url.openConnection();
        conn.setDoInput(true);

strongant

#!/bin/bash

set -e -u -o pipefail
commits="1e13e22c 0.20200420 avoid-get_keys"
modes="parallel serial none"
output=results.csv

echo -n 'num_metrics' > $output
for mode in $modes; do
  for commit in $commits; do

strongant

package com.codeaffine.jgit.example;

import static java.util.Collections.singleton;
import static org.eclipse.jgit.api.ListBranchCommand.ListMode.ALL;
import static org.eclipse.jgit.transport.RemoteConfig.getAllRemoteConfigs;
import static org.junit.Assert.*;

import java.io.File;
import java.io.IOException;
import java.util.List;

strongant

The view ClusterRole doesn’t actually have permissions for the Cluster level objects like Nodes and Persistent Volume Claims. So we’ll have to create a new RBAC config.

First, we’ll create a new dashboard-viewonly ClusterRole:

---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  name: dashboard-viewonly