rblundon/homelab
0
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Squashed 'cluster-config/' content from commit 654f2390

Browse Source 
git-subtree-dir: cluster-config
git-subtree-split: 654f23903bd1f9a27a4810bd289d165b6cfdbb0c
This commit is contained in:
Ryan Blundon
2025-03-30 15:46:16 -05:00
commit fe564d7227
346 changed files with 11754 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
components/oauth/base/kustomization.yaml Normal file
View File

@@ -0,0 +1,5 @@
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
resources:
- oauth.yaml

6
components/oauth/base/oauth.yaml Normal file
View File

@@ -0,0 +1,6 @@
apiVersion: config.openshift.io/v1
kind: OAuth
metadata:
name: cluster
spec:
identityProviders: []

32
components/oauth/overlays/glauth/kustomization.yaml Normal file
View File

@@ -0,0 +1,32 @@
apiVersion: kustomize.config.k8s.io/v1alpha1
kind: Component
resources:
- ldap-external-secret.yaml
patches:
- patch: |-
- op: add
path: /spec/identityProviders/-
value:
name: Internal
mappingMethod: claim
type: LDAP
ldap:
attributes:
id:
- dn
name:
- cn
preferredUsername:
- uid
bindDN: "openshift,dc=ocplab,dc=com"
bindPassword:
name: ldap-secret
insecure: true
url: "ldap://infra-server/ou=users,dc=ocplab,dc=com?uid"
target:
group: config.openshift.io
kind: OAuth
name: cluster
version: v1

15
components/oauth/overlays/glauth/ldap-external-secret.yaml Normal file
View File

@@ -0,0 +1,15 @@
apiVersion: external-secrets.io/v1beta1
kind: ExternalSecret
metadata:
name: ldap-secret
namespace: openshift-config
spec:
secretStoreRef:
kind: ClusterSecretStore
name: doppler-cluster
target:
name: ldap-secret
data:
- secretKey: bindPassword
remoteRef:
key: LDAP

15
components/oauth/overlays/google/google-client-secret.yaml Normal file
View File

@@ -0,0 +1,15 @@
apiVersion: external-secrets.io/v1beta1
kind: ExternalSecret
metadata:
name: google-secret
namespace: openshift-config
spec:
secretStoreRef:
kind: ClusterSecretStore
name: doppler-cluster
target:
name: google-secret
data:
- secretKey: clientSecret
remoteRef:
key: GOOGLE_SSO

24
components/oauth/overlays/google/kustomization.yaml Normal file
View File

@@ -0,0 +1,24 @@
apiVersion: kustomize.config.k8s.io/v1alpha1
kind: Component
resources:
- google-client-secret.yaml
patches:
- patch: |-
- op: add
path: /spec/identityProviders/-
value:
google:
clientID: 853224504221-d1vvbaokui9cnq5ge7pcih1sfl26sq69.apps.googleusercontent.com
clientSecret:
name: google-secret
hostedDomain: redhat.com
mappingMethod: claim
name: RedHatSSO
type: Google
target:
group: config.openshift.io
kind: OAuth
name: cluster
version: v1

11
components/oauth/overlays/google/patch-google-idp.yaml Normal file
View File

@@ -0,0 +1,11 @@
- op: add
path: /spec/identityProviders/1
value:
google:
clientID: 853224504221-d1vvbaokui9cnq5ge7pcih1sfl26sq69.apps.googleusercontent.com
clientSecret:
name: google-secret
hostedDomain: redhat.com
mappingMethod: claim
name: RedHatSSO
type: Google

5
components/oauth/overlays/homelab/kustomization.yaml Normal file
View File

@@ -0,0 +1,5 @@
resources:
- ../../base
components:
- ../sso

15
components/oauth/overlays/htpass/htpass-secret-external.yaml Normal file
View File

@@ -0,0 +1,15 @@
apiVersion: external-secrets.io/v1beta1
kind: ExternalSecret
metadata:
name: htpass-secret
namespace: openshift-config
spec:
secretStoreRef:
kind: ClusterSecretStore
name: doppler-cluster
target:
name: htpass-secret
data:
- secretKey: htpasswd
remoteRef:
key: HTPASSWD

19
components/oauth/overlays/htpass/kustomization.yaml Normal file
View File

@@ -0,0 +1,19 @@
resources:
- htpass-secret-external.yaml
patches:
- patch: |-
- op: add
path: /spec/identityProviders/1
value:
htpasswd:
fileData:
name: htpass-secret
mappingMethod: claim
name: htpasswd
type: HTPasswd
target:
group: config.openshift.io
kind: OAuth
name: cluster
version: v1

3
components/oauth/overlays/matrix-template/README.md Normal file
View File

@@ -0,0 +1,3 @@
From the OpenShift Developer Console contest, see original repo here:
https://github.com/kenmoini/openshift-web-console-customizations/tree/master/competition/kenmoini

20
components/oauth/overlays/matrix-template/kustomization.yaml Normal file
View File

@@ -0,0 +1,20 @@
apiVersion: kustomize.config.k8s.io/v1alpha1
kind: Component
resources:
- ../../../login-template/base
patches:
- patch: |-
- op: add
path: /spec/templates
value:
login:
name: matrix-login-template
providerSelection:
name: matrix-providers-template
target:
group: config.openshift.io
kind: OAuth
name: cluster
version: v1

12
components/oauth/overlays/sso/console.yaml Normal file
View File

@@ -0,0 +1,12 @@
apiVersion: config.openshift.io/v1
kind: Console
metadata:
annotations:
include.release.openshift.io/ibm-cloud-managed: "true"
include.release.openshift.io/self-managed-high-availability: "true"
include.release.openshift.io/single-node-developer: "true"
release.openshift.io/create-only: "true"
name: cluster
spec:
authentication:
logoutRedirect: https://sso.ocplab.com/realms/ocplab/protocol/openid-connect/logout?client_id=openshift&post_logout_redirect_uri=https://console-openshift-console.${SUB_DOMAIN}

43
components/oauth/overlays/sso/kustomization.yaml Normal file
View File

@@ -0,0 +1,43 @@
apiVersion: kustomize.config.k8s.io/v1alpha1
kind: Component
resources:
- oidc-client-secret.yaml
- console.yaml
patches:
- patch: |-
- op: add
path: /spec/identityProviders/-
value:
name: LabSSO
mappingMethod: claim
type: OpenID
openID:
clientID: openshift
clientSecret:
name: oidc-client-secret
extraScopes:
- email
- profile
extraAuthorizeParameters:
include_granted_scopes: "true"
claims:
preferredUsername:
- preferred_username
- email
name:
- nickname
- given_name
- name
email:
- custom_email_claim
- email
groups:
- groups
issuer: https://sso.ocplab.com/realms/ocplab
target:
group: config.openshift.io
kind: OAuth
name: cluster
version: v1

15
components/oauth/overlays/sso/oidc-client-secret.yaml Normal file
View File

@@ -0,0 +1,15 @@
apiVersion: external-secrets.io/v1beta1
kind: ExternalSecret
metadata:
name: oidc-client-secret
namespace: openshift-config
spec:
secretStoreRef:
kind: ClusterSecretStore
name: doppler-cluster
target:
name: oidc-client-secret
data:
- secretKey: clientSecret
remoteRef:
key: OIDC_OCPLAB