ProxyAuthK8S/kubeconfig-template.oidc.yaml at main · batleforc/ProxyAuthK8S · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
apiVersion: v1
clusters:
  - cluster:
      server: ""
    name: talos-default
contexts:
  - context:
      cluster: talos-default
      user: admin@talos-default
    name: admin@talos-default
  - context:
      cluster: talos-default
      user: admin@talos-proxy
    name: admin@talos-proxy
  - context:
      cluster: talos-default
      user: admin@talos-task
    name: admin@talos-task
current-context: admin@talos-task
kind: Config
preferences: {}
users:
  - name: admin@talos-default
    user:
      exec:
        apiVersion: client.authentication.k8s.io/v1beta1
        args:
          - oidc-login
          - get-token
          - --oidc-issuer-url=https://authelia.k8s.localhost
          - --oidc-client-id=kube_login
          - --oidc-client-secret=insecure_secret
          - --oidc-extra-scope=groups
          - --insecure-skip-tls-verify=true
        command: kubectl
        env: null
        provideClusterInfo: false
  - name: admin@talos-proxy
    user:
      exec:
        apiVersion: client.authentication.k8s.io/v1beta1
        args:
          - proxyauth
          - get-token
          - -n default
          - -s https://proxyauthk8s.k8s.localhost
          - local-sso
        command: kubectl
        env: null
        provideClusterInfo: false
  - name: admin@talos-task
    user:
      exec:
        apiVersion: client.authentication.k8s.io/v1
        args:
          - cli
          - --
          - get-token
          - local-sso
        command: task
        env: null
        provideClusterInfo: true
        interactiveMode: Never