0.1.0-0.1.0 • Published 5 years ago

@helm-charts/banzaicloud-stable-jwt-to-rbac v0.1.0-0.1.0

Weekly downloads
1
License
MIT
Repository
-
Last release
5 years ago

@helm-charts/banzaicloud-stable-jwt-to-rbac

A Helm chart for Kubernetes

FieldValue
Repository Namebanzaicloud-stable
Chart Namejwt-to-rbac
Chart Version0.1.0
NPM Package Version0.1.0
# Default values for jwt-to-rbac.
# This is a YAML-formatted file.
# Declare variables to be passed into your templates.

replicaCount: 1

image:
  repository: banzaicloud/jwt-to-rbac
  tag: 0.1.0
  pullPolicy: IfNotPresent

nameOverride: ''
fullnameOverride: ''

port:
  name: http
  containerPort: 5555
  protocol: TCP

configDir: /etc/jwt-to-rbac

service:
  type: ClusterIP
  port: 5555

config:
  app:
    addr: ':5555'
  log:
    level: '4'
    format: 'json'
    noColor: true
  tokenhandler:
    caCertPath: ''
    dex:
      clientID: ''
      issuerURL: ''
  rbachandler:
    githubOrg: ''
    customGroups: []

ingress:
  enabled: false
  annotations:
    {}
    # kubernetes.io/ingress.class: nginx
    # kubernetes.io/tls-acme: "true"
  path: /
  hosts:
    - chart-example.local
  tls: []
  #  - secretName: chart-example-tls
  #    hosts:
  #      - chart-example.local

resources:
  {}
  # We usually recommend not to specify default resources and to leave this as a conscious
  # choice for the user. This also increases chances charts run on environments with little
  # resources, such as Minikube. If you do want to specify resources, uncomment the following
  # lines, adjust them as necessary, and remove the curly braces after 'resources:'.
  # limits:
  #  cpu: 100m
  #  memory: 128Mi
  # requests:
  #  cpu: 100m
  #  memory: 128Mi

nodeSelector: {}

tolerations: []

affinity: {}

JWT-to-RBAC helm chart

Helm chart for JWT-to-RBAC that lets you automatically generate RBAC resources based on JWT token.

Installing the Chart

$ helm repo add banzaicloud-stable http://kubernetes-charts.banzaicloud.com/branch/master
$ helm repo update

Deploying jwt-to-rbac:

$ helm install --name <name> --set config.tokenhandler.dex.clientID=<client-id> --set config.tokenhandler.dex.issuerURL=<http://dex-url/dex>

Configuration

The following table lists configurable parameters of the dex chart and their default values.

ParameterDescriptionDefault
image.repositoryjwt-to-rbac imagebanzaicloud/jwt-to-rbac
image.tagimage tag0.1.0
image.pullPolicyimage pull policyIfNotPresent
port.nameport namehttp
port.containerPortport port5555
post.protocolport protocolTCP
service.typeservice typeClusterIP
service.portservice port5555
configDirjwt-to-rbac config directory/etc/jwt-to-rbac
config.app.addrjwt-to-rbac listen address":5555"
config.log.leveljwt-to-rbac log level"4"
config.log.formatjwt-to-rbac log format"json"
config.log.noColorjwt-to-rbac log noColortrue
config.tokenhandler.caCertPathCA cert for Dex used self-signed cert""
config.tokenhandler.dex.clientIDclient ID for Dex""
config.tokenhandler.dex.issuerURLDex url""
config.rbachandler.githubOrgspecified github organization""
config.rbachandler.customGroupscustom group mapping, more details in JWT-to-RBAC[]