Skip to content

Instantly share code, notes, and snippets.

@kvaps
Last active August 26, 2023 12:29
Show Gist options
  • Star 1 You must be signed in to star a gist
  • Fork 1 You must be signed in to fork a gist
  • Save kvaps/f070eff1081bdbc4ee29de4d5555da3d to your computer and use it in GitHub Desktop.
Save kvaps/f070eff1081bdbc4ee29de4d5555da3d to your computer and use it in GitHub Desktop.
Openshift-console for Kubernetes with OIDC
---
apiVersion: apps/v1
kind: Deployment
metadata:
annotations:
qbec.io/component: console
labels:
qbec.io/application: openshift-console
qbec.io/environment: stage
name: openshift-console
spec:
replicas: 1
template:
metadata:
labels:
app: openshift-console
spec:
containers:
- args:
- /opt/bridge/bin/bridge
- --public-dir=/opt/bridge/static
- --listen=http://0.0.0.0:9000
- --k8s-auth=oidc
- --user-auth=oidc
- --user-auth-oidc-issuer-url=https://keycloak.example.org/auth/realms/kubernetes
- --user-auth-oidc-client-id=kubernetes
- --user-auth-oidc-client-secret=098c139a-8b33-4537-ace3-20abec54f399
- --base-address=https://kubernetes.example.org
image: quay.io/openshift/origin-console:latest
name: openshift-console
ports:
- containerPort: 9000
---
apiVersion: networking.k8s.io/v1beta1
kind: Ingress
metadata:
annotations:
kubernetes.io/ingress.class: nginx-internal
qbec.io/component: console
labels:
qbec.io/application: openshift-console
qbec.io/environment: stage
name: openshift-console
spec:
rules:
- host: kubernetes.example.org
http:
paths:
- backend:
serviceName: openshift-console
servicePort: 9000
tls:
- hosts:
- kubernetes.example.org
---
apiVersion: v1
kind: Service
metadata:
annotations:
qbec.io/component: console
labels:
qbec.io/application: openshift-console
qbec.io/environment: stage
name: openshift-console
spec:
ports:
- port: 9000
protocol: TCP
targetPort: 9000
selector:
app: openshift-console
type: ClusterIP
@Nurlan199206
Copy link

i have deployed okd console 4.14 with keycloak oidc.. but web UI websockets is looping.

image

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment