Skip to content

Instantly share code, notes, and snippets.

@Nurlan199206

Nurlan199206/gist:28d6d98f229cb62643a7bcfbd9799f8a

Last active March 30, 2024 16:04
Show Gist options
  • Save Nurlan199206/28d6d98f229cb62643a7bcfbd9799f8a to your computer and use it in GitHub Desktop.
Save Nurlan199206/28d6d98f229cb62643a7bcfbd9799f8a to your computer and use it in GitHub Desktop.
Download ZIP

Revisions

  1. Nurlan199206 revised this gist Mar 30, 2024. 1 changed file with 7 additions and 1 deletion.
    8 changes: 7 additions & 1 deletion gistfile1.txt
    View file
    Original file line number Diff line number Diff line change
    @@ -5,8 +5,14 @@ Software version:
    Keycloak: 23.0.7
    Kubernetes: 1.26.5

    # Run Keycloak on port 443 with custom domain
    1) bash kc.sh start-dev --https-certificate-file=/etc/letsencrypt/live/auth.dev-ops.kz/fullchain.pem --https-certificate-key-file=/etc/letsencrypt/live/auth.dev-ops.kz/privkey.pem --https-port=443

    # Add to each master node OIDC settings in /etc/kubernetes/manifests/kube-apiserver.yaml

    1) bash kc.sh start-dev --https-certificate-file=/etc/letsencrypt/live/auth.dev-ops.kz/fullchain.pem --https-certificate-key-file=/etc/letsencrypt/live/auth.dev-ops.kz/privkey.pem --https-port=443
    - --oidc-issuer-url=https://auth.dev-ops.kz/realms/kubernetes
    - --oidc-client-id=kubernetes
    - --oidc-groups-claim=groups
    - --oidc-username-claim=preferred_username

    10) kubectl create clusterrolebinding admin --clusterrole=cluster-admin --user https://auth.dev-ops.kz/realms/kubernetes#admin
  2. Nurlan199206 revised this gist Mar 30, 2024. 1 changed file with 11 additions and 0 deletions.
    11 changes: 11 additions & 0 deletions gistfile1.txt
    View file
    Original file line number Diff line number Diff line change
    @@ -1 +1,12 @@
    Vanilla OKD Console integration with Keycloak OIDC

    Software version:

    Keycloak: 23.0.7
    Kubernetes: 1.26.5



    1) bash kc.sh start-dev --https-certificate-file=/etc/letsencrypt/live/auth.dev-ops.kz/fullchain.pem --https-certificate-key-file=/etc/letsencrypt/live/auth.dev-ops.kz/privkey.pem --https-port=443

    10) kubectl create clusterrolebinding admin --clusterrole=cluster-admin --user https://auth.dev-ops.kz/realms/kubernetes#admin
  3. Nurlan199206 created this gist Mar 30, 2024.
    1 change: 1 addition & 0 deletions gistfile1.txt
    View file
    Original file line number Diff line number Diff line change
    @@ -0,0 +1 @@
    10) kubectl create clusterrolebinding admin --clusterrole=cluster-admin --user https://auth.dev-ops.kz/realms/kubernetes#admin