Thanks to visit codestin.com
Credit goes to github.com

Skip to content

Commit 11d91c1

Browse files
committed
update kubernetes.md document
1 parent cf4f88a commit 11d91c1

1 file changed

Lines changed: 15 additions & 3 deletions

File tree

Documentation/kubernetes.md

Lines changed: 15 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -152,20 +152,32 @@ $ ./bin/example-app --issuer https://dex.example.com:32000 --issuer-root-ca exam
152152

153153
Please note that the `example-app` will listen at http://127.0.0.1:5555 and can be changed with the `--listen` flag.
154154

155-
Once the example app is running, choose the GitHub option and grant access to dex to view your profile.
155+
Once the example app is running, open a browser and go to http://127.0.0.1:5555
156+
157+
A page appears with fields such as scope and client-id. For the most basic case these are not required, so leave the form blank. Click login.
158+
159+
On the next page, choose the GitHub option and grant access to dex to view your profile.
156160

157161
The default redirect uri is http://127.0.0.1:5555/callback and can be changed with the `--redirect-uri` flag and should correspond with your configmap.
158162

159163
Please note the redirect uri is different from the one you filled when creating `GitHub OAuth2 client credentials`.
160-
When you login, GitHub first redirects to dex (https://dex.example.com:32000/callback), then dex redirects to the redirect uri of exampl-app.
164+
When you login, GitHub first redirects to dex (https://dex.example.com:32000/callback), then dex redirects to the redirect uri of example-app.
161165

162-
The printed ID Token can then be used as a bearer token to authenticate against the API server.
166+
The printed "ID Token" can then be used as a bearer token to authenticate against the API server.
163167

164168
```
165169
$ token='(id token)'
166170
$ curl -H "Authorization: Bearer $token" -k https://( API server host ):443/api/v1/nodes
167171
```
168172

173+
In the kubeconfig file ~/.kube/config, the format is:
174+
```
175+
users:
176+
- name: (USERNAME)
177+
user:
178+
token: (ID-TOKEN)
179+
```
180+
169181
[k8s-authz]: http://kubernetes.io/docs/admin/authorization/
170182
[k8s-oidc]: http://kubernetes.io/docs/admin/authentication/#openid-connect-tokens
171183
[trusted-peers]: https://godoc.org/github.com/dexidp/dex/storage#Client

0 commit comments

Comments
 (0)