Skip to content

Instantly share code, notes, and snippets.

Show Gist options
  • Save guillaumedossantos/5d2646d47ec106c24bdc66d44a729c77 to your computer and use it in GitHub Desktop.
Save guillaumedossantos/5d2646d47ec106c24bdc66d44a729c77 to your computer and use it in GitHub Desktop.
SSO for K8S Dashboard with Azure AD - 1
# ------------------- OAuth2_Proxy Deployment ------------------- #
{% if kube_version is version('v1.16', '>=') %}
apiVersion: apps/v1
{% else %}
apiVersion: extensions/v1beta1
{% endif %}
kind: Deployment
metadata:
labels:
k8s-app: oauth2-proxy
name: oauth2-proxy
namespace: kube-system
spec:
replicas: 1
selector:
matchLabels:
k8s-app: oauth2-proxy
template:
metadata:
labels:
k8s-app: oauth2-proxy
spec:
containers:
- args:
- --cookie-secure=true
- --cookie-secret={{ kubedash_cookie_secret }}
- --cookie-expire=15m
- --cookie-refresh=0
- --provider=azure
- --client-id={{ azure_webapp_ID }}
- --client-secret={{ azure_webapp_client_secret }}
- --redirect-url={{ azure_webapp_redirect_URI }}
- --http-address=0.0.0.0:8080
- --email-domain=mydomain.com
env:
image: quay.io/oauth2-proxy/oauth2-proxy:latest
imagePullPolicy: Always
name: oauth2-proxy
ports:
- containerPort: 8080
protocol: TCP
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment