icecheng/freeleaps-ops
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

feat(k8s): enable integrates with Microsoft Entra ID

Browse Source 
Signed-off-by: 孙振宇 <>
This commit is contained in:
孙振宇 2025-01-13 13:10:07 +08:00
parent 1753ce658e
commit 561906df63
1 changed files with 6 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
cluster/ansible/manifests/group_vars/k8s_cluster/k8s-cluster.yml
View File

@ -46,14 +46,14 @@ credentials_dir: "{{ inventory_dir }}/credentials"
## Variables for OpenID Connect Configuration https://kubernetes.io/docs/admin/authentication/ ## Variables for OpenID Connect Configuration https://kubernetes.io/docs/admin/authentication/
## To use OpenID you have to deploy additional an OpenID Provider (e.g Dex, Keycloak, ...) ## To use OpenID you have to deploy additional an OpenID Provider (e.g Dex, Keycloak, ...)
# kube_oidc_url: https:// ... kube_oidc_url: https://login.microsoftonline.com/cf151ee8-5c2c-4fe7-a1c4-809ba43c9f24
# kube_oidc_client_id: kubernetes kube_oidc_client_id: 7cd1df19-24ea-46d7-acd3-5336283139e0
## Optional settings for OIDC ## Optional settings for OIDC
# kube_oidc_ca_file: "{{ kube_cert_dir }}/ca.pem" # kube_oidc_ca_file: "{{ kube_cert_dir }}/ca.pem"
# kube_oidc_username_claim: sub kube_oidc_username_claim: sub
# kube_oidc_username_prefix: 'oidc:' kube_oidc_username_prefix: 'mathmast:'
# kube_oidc_groups_claim: groups kube_oidc_groups_claim: groups
# kube_oidc_groups_prefix: 'oidc:' kube_oidc_groups_prefix: 'mathmast:'
## Variables to control webhook authn/authz ## Variables to control webhook authn/authz
# kube_webhook_token_auth: false # kube_webhook_token_auth: false