interga
This commit is contained in:
12
5.Intergation/0.Ldap-federation.sh
Normal file
12
5.Intergation/0.Ldap-federation.sh
Normal file
@@ -0,0 +1,12 @@
|
||||
Username LDAP attribute: uid
|
||||
RDN LDAP attribute: uid
|
||||
UUID LDAP attribute: uid
|
||||
User Object Classes: uid
|
||||
Connection URL Test connection: ldap://id.rmnl.ru
|
||||
Users DN: cn=users,cn=accounts,dc=rmnl,dc=ru
|
||||
Custom User LDAP Filter: ""
|
||||
|
||||
Bind DN: uid=system,cn=sysaccounts,cn=etc,dc=rmnl,dc=ru
|
||||
Bind Credential: <pass>
|
||||
|
||||
Connection Timeout: 6000
|
4
5.Intergation/1.links.sh
Normal file
4
5.Intergation/1.links.sh
Normal file
@@ -0,0 +1,4 @@
|
||||
Valid Redirect URIs: https://argo.rmnl.ru/auth/callback
|
||||
Base URL: /applications
|
||||
|
||||
Anoteher links: https://argo.rmnl.ru
|
10
5.Intergation/2.argocd-secret.yaml
Normal file
10
5.Intergation/2.argocd-secret.yaml
Normal file
@@ -0,0 +1,10 @@
|
||||
echo -n '5OUDHUlU9bJ2A6LtPzmFnD9IgHW6CyjB' | base64
|
||||
|
||||
apiVersion: v1
|
||||
kind: Secret
|
||||
metadata:
|
||||
name: argocd-secret
|
||||
data:
|
||||
...
|
||||
oidc.keycloak.clientSecret: c2Vrb0lFbmJEckNZb2pYMWZOZFRNdmVDckREbkdOYk8=
|
||||
...
|
13
5.Intergation/3.argocd-cm.yaml
Normal file
13
5.Intergation/3.argocd-cm.yaml
Normal file
@@ -0,0 +1,13 @@
|
||||
apiVersion: v1
|
||||
kind: ConfigMap
|
||||
metadata:
|
||||
name: argocd-cm
|
||||
namespace: argo-cd
|
||||
data:
|
||||
url: https://argo.rmnl.ru
|
||||
oidc.config: |
|
||||
name: Keycloak
|
||||
issuer: https://key.rmnl.ru/realms/master
|
||||
clientID: argocd
|
||||
clientSecret: $oidc.keycloak.clientSecret
|
||||
requestedScopes: ["openid", "profile", "email", "groups"]
|
16
5.Intergation/4.argocd-rbac-cm.yaml
Normal file
16
5.Intergation/4.argocd-rbac-cm.yaml
Normal file
@@ -0,0 +1,16 @@
|
||||
apiVersion: v1
|
||||
kind: ConfigMap
|
||||
metadata:
|
||||
name: argocd-rbac-cm
|
||||
data:
|
||||
policy.csv: |
|
||||
g, Argocd-admins, role:admin
|
||||
|
||||
---
|
||||
apiVersion: v1
|
||||
kind: ConfigMap
|
||||
metadata:
|
||||
name: argocd-rbac-cm
|
||||
data:
|
||||
policy.csv: |
|
||||
g, /Argocd-admins, role:admin
|
15
6.Addons/argocd-add-rke.yaml
Normal file
15
6.Addons/argocd-add-rke.yaml
Normal file
@@ -0,0 +1,15 @@
|
||||
apiVersion: v1
|
||||
kind: Secret
|
||||
metadata:
|
||||
name: mycluster-secret
|
||||
namespace: argo-cd
|
||||
labels:
|
||||
argocd.argoproj.io/secret-type: cluster
|
||||
type: Opaque
|
||||
stringData:
|
||||
name: mycluster.com
|
||||
server: https://<rancher.domain.com>/k8s/clusters/<id>
|
||||
config: |
|
||||
{
|
||||
"bearerToken": "<authentication token>",
|
||||
}
|
Reference in New Issue
Block a user