c8b17978a9
This change deploys a small Squid-based proxy into the `dex` namespace in our integration test environment. This lets us use the cluster-local DNS name (`http://dex.dex.svc.cluster.local/dex`) as the OIDC issuer. It will make generating certificates easier, and most importantly it will mean that our CLI can see Dex at the same name/URL as the supervisor running inside the cluster. Signed-off-by: Matt Moyer <moyerm@vmware.com>
18 lines
670 B
YAML
18 lines
670 B
YAML
#! Copyright 2020 the Pinniped contributors. All Rights Reserved.
|
|
#! SPDX-License-Identifier: Apache-2.0
|
|
|
|
#@data/values
|
|
---
|
|
ports:
|
|
#! Port on which the Pinniped CLI is listening for a callback (`--listen-port` flag value)
|
|
#! Used in the Dex configuration to form the valid redirect URIs for our test client.
|
|
cli: 48095
|
|
|
|
#! Kubernetes NodePort that should be forwarded to the proxy service.
|
|
#! Used to create a Service of type: NodePort
|
|
node: 31235
|
|
|
|
#! External port where the proxy ends up exposed on localhost during tests. This value comes from
|
|
#! our Kind configuration which maps 127.0.0.1:12346 to port 31235 on the Kind worker node.
|
|
local: 12346
|