interga
This commit is contained in:
12
5.Intergation/0.Ldap-federation.sh
Normal file
12
5.Intergation/0.Ldap-federation.sh
Normal file
@@ -0,0 +1,12 @@
|
|||||||
|
Username LDAP attribute: uid
|
||||||
|
RDN LDAP attribute: uid
|
||||||
|
UUID LDAP attribute: uid
|
||||||
|
User Object Classes: uid
|
||||||
|
Connection URL Test connection: ldap://id.rmnl.ru
|
||||||
|
Users DN: cn=users,cn=accounts,dc=rmnl,dc=ru
|
||||||
|
Custom User LDAP Filter: ""
|
||||||
|
|
||||||
|
Bind DN: uid=system,cn=sysaccounts,cn=etc,dc=rmnl,dc=ru
|
||||||
|
Bind Credential: <pass>
|
||||||
|
|
||||||
|
Connection Timeout: 6000
|
4
5.Intergation/1.links.sh
Normal file
4
5.Intergation/1.links.sh
Normal file
@@ -0,0 +1,4 @@
|
|||||||
|
Valid Redirect URIs: https://argo.rmnl.ru/auth/callback
|
||||||
|
Base URL: /applications
|
||||||
|
|
||||||
|
Anoteher links: https://argo.rmnl.ru
|
10
5.Intergation/2.argocd-secret.yaml
Normal file
10
5.Intergation/2.argocd-secret.yaml
Normal file
@@ -0,0 +1,10 @@
|
|||||||
|
echo -n '5OUDHUlU9bJ2A6LtPzmFnD9IgHW6CyjB' | base64
|
||||||
|
|
||||||
|
apiVersion: v1
|
||||||
|
kind: Secret
|
||||||
|
metadata:
|
||||||
|
name: argocd-secret
|
||||||
|
data:
|
||||||
|
...
|
||||||
|
oidc.keycloak.clientSecret: c2Vrb0lFbmJEckNZb2pYMWZOZFRNdmVDckREbkdOYk8=
|
||||||
|
...
|
13
5.Intergation/3.argocd-cm.yaml
Normal file
13
5.Intergation/3.argocd-cm.yaml
Normal file
@@ -0,0 +1,13 @@
|
|||||||
|
apiVersion: v1
|
||||||
|
kind: ConfigMap
|
||||||
|
metadata:
|
||||||
|
name: argocd-cm
|
||||||
|
namespace: argo-cd
|
||||||
|
data:
|
||||||
|
url: https://argo.rmnl.ru
|
||||||
|
oidc.config: |
|
||||||
|
name: Keycloak
|
||||||
|
issuer: https://key.rmnl.ru/realms/master
|
||||||
|
clientID: argocd
|
||||||
|
clientSecret: $oidc.keycloak.clientSecret
|
||||||
|
requestedScopes: ["openid", "profile", "email", "groups"]
|
16
5.Intergation/4.argocd-rbac-cm.yaml
Normal file
16
5.Intergation/4.argocd-rbac-cm.yaml
Normal file
@@ -0,0 +1,16 @@
|
|||||||
|
apiVersion: v1
|
||||||
|
kind: ConfigMap
|
||||||
|
metadata:
|
||||||
|
name: argocd-rbac-cm
|
||||||
|
data:
|
||||||
|
policy.csv: |
|
||||||
|
g, Argocd-admins, role:admin
|
||||||
|
|
||||||
|
---
|
||||||
|
apiVersion: v1
|
||||||
|
kind: ConfigMap
|
||||||
|
metadata:
|
||||||
|
name: argocd-rbac-cm
|
||||||
|
data:
|
||||||
|
policy.csv: |
|
||||||
|
g, /Argocd-admins, role:admin
|
15
6.Addons/argocd-add-rke.yaml
Normal file
15
6.Addons/argocd-add-rke.yaml
Normal file
@@ -0,0 +1,15 @@
|
|||||||
|
apiVersion: v1
|
||||||
|
kind: Secret
|
||||||
|
metadata:
|
||||||
|
name: mycluster-secret
|
||||||
|
namespace: argo-cd
|
||||||
|
labels:
|
||||||
|
argocd.argoproj.io/secret-type: cluster
|
||||||
|
type: Opaque
|
||||||
|
stringData:
|
||||||
|
name: mycluster.com
|
||||||
|
server: https://<rancher.domain.com>/k8s/clusters/<id>
|
||||||
|
config: |
|
||||||
|
{
|
||||||
|
"bearerToken": "<authentication token>",
|
||||||
|
}
|
Reference in New Issue
Block a user