ContainerImage.Pinniped/deploy
Matt Moyer 7ce760a5dd
Register a second APIService for the login.pinniped.dev.
This is handled by a second instance of the APIServiceUpdaterController.

Signed-off-by: Matt Moyer <moyerm@vmware.com>
2020-09-17 09:52:23 -05:00
..
crd.pinniped.dev_credentialissuerconfigs.yaml Define the WebhookIdentityProvider CRD. 2020-09-15 11:44:23 -05:00
deployment.yaml Register a second APIService for the login.pinniped.dev. 2020-09-17 09:52:23 -05:00
idp.pinniped.dev_webhookidentityproviders.yaml Define the WebhookIdentityProvider CRD. 2020-09-15 11:44:23 -05:00
rbac.yaml Update copyright to reference Pinniped contributors 2020-09-16 10:05:51 -04:00
README.md Add demo instructions 2020-09-15 12:10:20 -07:00
values.yaml Use public container images for codegen as as defaults when deploying 2020-09-16 15:46:51 -07:00
webhook.yaml Update copyright to reference Pinniped contributors 2020-09-16 10:05:51 -04:00

Deploying

Connecting Pinniped to an Identity Provider

If you would like to try Pinniped, but you don't have a compatible identity provider, you can use Pinniped's test identity provider. See deploy-local-user-authenticator/README.md for details.

Tools

This example deployment uses ytt and kapp from Carvel to template the YAML files and to deploy the app. Either install ytt and kapp or use the container image from Dockerhub.

Procedure

  1. The configuration options are in values.yml. Fill in the values in that file, or override those values using ytt command-line options in the command below.
  2. In a terminal, cd to this deploy directory
  3. To generate the final YAML files, run: ytt --file .
  4. Deploy the generated YAML using your preferred deployment tool, such as kubectl or kapp. For example: ytt --file . | kapp deploy --yes --app pinniped --diff-changes --file -