mirror of
https://github.com/containers/kubernetes-mcp-server.git
synced 2025-10-23 01:22:57 +03:00
7fe604e61d
* Initial KinD setup Signed-off-by: Matthias Wessendorf <mwessend@redhat.com> * Initial Keycloak container setup Signed-off-by: Matthias Wessendorf <mwessend@redhat.com> * Adding an initial realm setup Signed-off-by: Matthias Wessendorf <mwessend@redhat.com> * Adding OIDC issuer and realm updates, adding cert-manager and handling self-signed certificates Signed-off-by: Matthias Wessendorf <mwessend@redhat.com> * Updates to script b/c of invalid auth config Signed-off-by: Matthias Wessendorf <mwessend@redhat.com> * Adjusting ports and better support for mac/podman Signed-off-by: Matthias Wessendorf <mwessend@redhat.com> * Addressing review comments: * do not expose all internal tasks, just keep the important targets documents * remove the keycloak-forward * move binaries for dev tools to _output * generate a configuration TOML file into the _output folder Signed-off-by: Matthias Wessendorf <mwessend@redhat.com> --------- Signed-off-by: Matthias Wessendorf <mwessend@redhat.com>
31 lines
821 B
YAML
31 lines
821 B
YAML
kind: Cluster
|
|
apiVersion: kind.x-k8s.io/v1alpha4
|
|
nodes:
|
|
- role: control-plane
|
|
extraMounts:
|
|
- hostPath: ./_output/cert-manager-ca/ca.crt
|
|
containerPath: /etc/kubernetes/pki/keycloak-ca.crt
|
|
readOnly: true
|
|
kubeadmConfigPatches:
|
|
- |
|
|
kind: InitConfiguration
|
|
nodeRegistration:
|
|
kubeletExtraArgs:
|
|
node-labels: "ingress-ready=true"
|
|
|
|
kind: ClusterConfiguration
|
|
apiServer:
|
|
extraArgs:
|
|
oidc-issuer-url: https://keycloak.127-0-0-1.sslip.io:8443/realms/openshift
|
|
oidc-client-id: openshift
|
|
oidc-username-claim: preferred_username
|
|
oidc-groups-claim: groups
|
|
oidc-ca-file: /etc/kubernetes/pki/keycloak-ca.crt
|
|
extraPortMappings:
|
|
- containerPort: 80
|
|
hostPort: 8080
|
|
protocol: TCP
|
|
- containerPort: 443
|
|
hostPort: 8443
|
|
protocol: TCP
|