leland knight
leland knight
k, got this working yesterday, have got heimdall setup behind an oauth2-proxy and have set it up to pass along a bearer token Can heimdall use this token to allow...
Updated my clusters and redeployed this again. So far this is my favorite dashboard-type app. Hoping it might be possible to support multiple users / oidc.
On the heimdall side, my oauth2-proxy configuration in the annotation section: ``` annotations: # use oauth2-proxy for login & obtain bearer token nginx.ingress.kubernetes.io/auth-url: "https://oauth2-proxy.vc-prod.k.home.net/oauth2/auth" nginx.ingress.kubernetes.io/auth-signin: "https://oauth2-proxy.vc-prod.k.home.net/oauth2/start?rd=$escaped_request_uri" # header to watch...
Closing here and opening as a discussion: https://github.com/linuxserver/Heimdall/discussions/898
Also experiencing this, could use a work around. Tried adding --authentication-timeout-sec 30 but it didn't help: ``` $ kubelogin-oidc get-token --oidc-issuer-url=https://keycloak.mydomain.com/auth/realms/mydomain.com --oidc-client-id=kubernetes -v 5 --authentication-timeout-sec 30 I0406 12:33:25.248735 32909 get_token.go:53]...
Not at a computer at the moment but if I am remembering correctly a login was interrupted resulting in a hung session which was using the port. Ended up rebooting...
Is the answer to this on this reddit post? https://www.reddit.com/r/kubernetes/comments/n78d3v/how_to_get_the_deployment_crd_configuration/
I was lucky to have found sample code for my use case, keycloak, [here](https://vikaspogu.dev/posts/sso-jwt-golang/). Without that, odds are I'd still be trying to get things working. (not enough comments to...
I was thinking to write an operator for just this use case. Happy to have discovered trust-manager. Thing is, the location where the cabundle should be placed or imported from...
Just updated pinniped to the latest. Still needing to use the workaround for this one, and it is a bit of a hack, would be nice if pinniped could recognize...