package
0.0.0-20190628093746-affaa533fc2e
Repository: https://github.com/szymongib/kyma.git
Documentation: pkg.go.dev
# README
IAM Kubeconfig Service
Overview
This project is a generator of configurations used in Kyma.
Prerequisites
The following tools are required to set up the project:
Installation
For installation use the dedicated Helm chart.
Usage
Configuration
Use the following arguments to configure the application:
Name | Required | Default | Description |
---|---|---|---|
port | No | 8000 | Application port. |
kube-config-cluster-name | Yes | Name of the Kubernetes cluster. | |
kube-config-url | Yes | URL of the Kubernetes Apiserver. | |
kube-config-ca-file | Yes | Path of the file with Certificate Authority of the Kubernetes cluster. | |
kube-config-ns | No | Default namespace of the Kubernetes context. | |
oidc-issuer-url | Yes | The URL of the OpenID issuer. Used to verify the OIDC JSON Web Token (JWT). | |
oidc-client-id | Yes | The client ID for the OpenID Connect client. | |
oidc-username-claim | No | Identifier of the user in JWT claim. | |
oidc-groups-claim | No | groups | Identifier of groups in JWT claim. |
oidc-username-prefix | No | If provided, all users will be prefixed with this value to prevent conflicts with other authentication strategies. | |
oidc-groups-prefix | No | If provided, all groups will be prefixed with this value to prevent conflicts with other authentication strategies. |
Run a local version
In order to run a local version, a running minikube is required.
To run the application without building the binary, execute the following commands:
go run cmd/generator/main.go \
-kube-config-cluster-name=minikube \
-kube-config-url=:8443 \
-kube-config-ca-file=~/.minikube/ca.crt \
-oidc-issuer-url="https://dex.kyma.local" \
-oidc-client-id="kyma-client"
Development
Testing
Run tests:
go test -v ./...
Run tests with coverage:
go test -coverprofile=coverage_report.out -v ./...