djpbessems/ContainerImage.Pinniped
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Docs only: Use consistent sample user name

Browse Source
This commit is contained in:
Dan Jahner 2020-10-02 13:59:14 -07:00
parent e97bad2198
commit 13e0b272c0
No known key found for this signature in database
GPG Key ID: 8E50AC7899DA5B72
1 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
deploy-local-user-authenticator/README.md
View File

@ -50,11 +50,11 @@ Either [install `ytt`](https://get-ytt.io/) or use the [container image from Doc
Use `kubectl` to create, edit, and delete user accounts by creating a `Secret` for each user account in the same Use `kubectl` to create, edit, and delete user accounts by creating a `Secret` for each user account in the same
namespace where local-user-authenticator is deployed. The name of the `Secret` resource is the username. namespace where local-user-authenticator is deployed. The name of the `Secret` resource is the username.
Store the user's group membership and `bcrypt` encrypted password as the contents of the `Secret`. Store the user's group membership and `bcrypt` encrypted password as the contents of the `Secret`.
For example, to create a user named `ryan` with the password `password123` For example, to create a user named `pinny-the-seal` with the password `password123`
who belongs to the groups `group1` and `group2`, use: who belongs to the groups `group1` and `group2`, use:
```bash ```bash
kubectl create secret generic ryan \ kubectl create secret generic pinny-the-seal \
--namespace local-user-authenticator \ --namespace local-user-authenticator \
--from-literal=groups=group1,group2 \ --from-literal=groups=group1,group2 \
--from-literal=passwordHash=$(htpasswd -nbBC 10 x password123 | sed -e "s/^x://") --from-literal=passwordHash=$(htpasswd -nbBC 10 x password123 | sed -e "s/^x://")
@ -109,7 +109,7 @@ is configured as an identity provider for Pinniped.
"apiVersion": "authentication.k8s.io/v1beta1", "apiVersion": "authentication.k8s.io/v1beta1",
"kind": "TokenReview", "kind": "TokenReview",
"spec": { "spec": {
"token": "ryan:password123" "token": "pinny-the-seal:password123"
} }
}' }'
``` ```
@ -128,7 +128,7 @@ is configured as an identity provider for Pinniped.
"status": { "status": {
"authenticated": true, "authenticated": true,
"user": { "user": {
"username": "ryan", "username": "pinny-the-seal",
"uid": "19c433ec-8f58-44ca-9ef0-2d1081ccb876", "uid": "19c433ec-8f58-44ca-9ef0-2d1081ccb876",
"groups": [ "groups": [
"group1", "group1",