Difference between revisions of "Initializing the Kubernetes cluster"

From Collective Computational Unit
Jump to navigation Jump to search
m (Authentication systems)
m (DEX with LDAP)
Line 13: Line 13:
 
## Run upload_ccu_tls.sh
 
## Run upload_ccu_tls.sh
 
# Spin up login application service.
 
# Spin up login application service.
# Modify loginapp-cm.yml: server config
+
## Modify loginapp-cm.yml: server config
 
## Modify loginapp-ing-srv.yml: service data, mapping of ports to outside world
 
## Modify loginapp-ing-srv.yml: service data, mapping of ports to outside world
 
## Modify loginapp-deploy.yml: ID secret for TLS
 
## Modify loginapp-deploy.yml: ID secret for TLS

Revision as of 17:20, 30 May 2019


Authentication systems

DEX with LDAP

Set up according to this tutorial with customized install scripts in kubernetes/init/dex/

  1. Create secrets for TLS connections, use certs for ccu.uni-konstanz.de (for now exposed, later switch to internal services):
    1. Modify ca-cm.yml to contain correct ca.
    2. Run upload_ccu_tls.sh
  2. Spin up login application service.
    1. Modify loginapp-cm.yml: server config
    2. Modify loginapp-ing-srv.yml: service data, mapping of ports to outside world
    3. Modify loginapp-deploy.yml: ID secret for TLS
    4. Run start-login-service.sh
  3. Spin up dex
    1. Modify dex-cm.yml: server data and LDAP configuration
    2. Modify dex-ing-srv.yml: service data, mapping of ports to outside world
    3. Modify dex-deploy.yml: ID secret for TLS
    4. Run start-dex-service.sh