[Starlingx-discuss] additional stx docs input:2006711

Camp, MaryX maryx.camp at intel.com
Wed Mar 18 01:11:10 UTC 2020


Thanks Theresa for following up.
I have created a review with your source file here:  https://review.opendev.org/#/c/712111/
Apologies for not adding you as a reviewer till now.

I am new to this role and I welcome feedback from you and Jerry about how to move forward with the review.
thanks,
Mary Camp
PTIGlobal Technical Writer | maryx.camp at intel.com<mailto:maryx.camp at intel.com>

From: Ho, Teresa <Teresa.Ho at windriver.com>
Sent: Tuesday, March 17, 2020 8:43 AM
To: starlingx-discuss at lists.starlingx.io; Camp, MaryX <maryx.camp at intel.com>
Subject: RE: additional stx docs input:2006711

Hi,

Additional doc info, regarding oidc-auth shell script, is provided in the attached file which was previously sent.

Thanks,
Teresa

From: Sun, Yicheng (Jerry) [mailto:Jerry.Sun at windriver.com]
Sent: Tuesday, March 10, 2020 4:11 PM
To: starlingx-discuss at lists.starlingx.io<mailto:starlingx-discuss at lists.starlingx.io>; maryx.camp at intel.com<mailto:maryx.camp at intel.com>
Subject: [Starlingx-discuss] stx docs input:2006711

Hi All,

We have just added the ability to configure oidc auth related parameters post-bootstrap:
system service-parameter-add kubernetes kube_apiserver oidc_client_id=value
system service-parameter-add kubernetes kube_apiserver oidc_groups_claim=value
system service-parameter-add kubernetes kube_apiserver oidc_issuer_url=value
system service-parameter-add kubernetes kube_apiserver oidc_username_claim=value

they used to be configurable only at boostrap time in localhost.yml:
    apiserver_oidc:
      client_id: stx-oidc-client-app
      issuer_url: https://<oam-floating-ip>:30556/dex<https://%3coam-floating-ip%3e:30556/dex>
      username_claim: email
      groups_claim: group

Apply the service parameters with "system service-parameter-apply kubernetes", or no changes will take place.
The valid configurations for the service parameters are the same as during bootstrap:
none of the parameters or
oidc_issuer_url, oidc_client_id, oidc_username_claim or
the above 3 and oidc_groups_claim

Thanks,
Jerry
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.starlingx.io/pipermail/starlingx-discuss/attachments/20200318/290b7fd4/attachment-0001.html>


More information about the Starlingx-discuss mailing list