History

Andrew Keesler ba6bc7f105 OpenIDConnectIdentityProvider CRD: first draft All fields are required right now for forwards-compatibility. Signed-off-by: Andrew Keesler <akeesler@vmware.com>		2020-09-25 10:56:22 -04:00
..
config.pinniped.dev_credentialissuerconfigs.yaml	Move CredentialIssuerConfig into new "config.pinniped.dev" API group.	2020-09-18 16:38:45 -05:00
deployment.yaml	Plumb through ImagePullSecrets to agent pod	2020-09-24 15:52:05 -04:00
idp.pinniped.dev_openidconnectidentityproviders.yaml	OpenIDConnectIdentityProvider CRD: first draft	2020-09-25 10:56:22 -04:00
idp.pinniped.dev_webhookidentityproviders.yaml	Define the WebhookIdentityProvider CRD.	2020-09-15 11:44:23 -05:00
rbac.yaml	Integration tests are passing ayooooooooooooooo	2020-09-23 12:47:04 -04:00
README.md	Add demo instructions	2020-09-15 12:10:20 -07:00
values.yaml	Create webhooks per-test and explicitly in `demo.md` instead of with ytt in `./deploy`.	2020-09-22 10:03:32 -05:00

README.md

Deploying

Connecting Pinniped to an Identity Provider

If you would like to try Pinniped, but you don't have a compatible identity provider, you can use Pinniped's test identity provider. See deploy-local-user-authenticator/README.md for details.

Tools

This example deployment uses ytt and kapp from Carvel to template the YAML files and to deploy the app. Either install ytt and kapp or use the container image from Dockerhub.

Procedure

The configuration options are in values.yml. Fill in the values in that file, or override those values using ytt command-line options in the command below.
In a terminal, cd to this deploy directory
To generate the final YAML files, run: ytt --file .
Deploy the generated YAML using your preferred deployment tool, such as kubectl or kapp. For example: ytt --file . | kapp deploy --yes --app pinniped --diff-changes --file -