3pp-mirror/pomerium
1
0
Fork 0
mirror of https://github.com/pomerium/pomerium.git synced 2025-06-19 11:12:53 +02:00
Code Issues Projects Releases Packages Wiki Activity

Helm Quickstart Update (#2380)

Browse source 
* removed/fixed redundant or incorrect config

And some small copy edits

* Update docs/docs/quick-start/helm.md

Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>

Co-authored-by: Travis Groth <travisgroth@users.noreply.github.com>
This commit is contained in:
Alex Fornuto 2021-07-21 12:45:15 -05:00 • committed by alexfornuto
parent 2ea61ae960
commit 0f06e003c1
3 changed files with 15 additions and 16 deletions
Download patch file Download diff file Expand all files Collapse all files

21
docs/docs/install/helm.md
View file

@ -12,12 +12,12 @@ This quick-start will show you how to deploy Pomerium with [Helm](https://helm.s
## Prerequisites
- A [Google Cloud Account](https://console.cloud.google.com/)
- A configured [identity provider]
- Install [kubectl](https://kubernetes.io/docs/tasks/tools/install-kubectl/)
- Install the [Google Cloud SDK](https://cloud.google.com/kubernetes-engine/docs/quickstart)
- Install [helm](https://helm.sh/docs/using_helm/)
- [TLS certificates]
- A [Google Cloud Account](https://console.cloud.google.com/).
- A configured [identity provider].
- Install [kubectl](https://kubernetes.io/docs/tasks/tools/install-kubectl/).
- Install the [Google Cloud SDK](https://cloud.google.com/kubernetes-engine/docs/quickstart).
- Install [helm](https://helm.sh/docs/using_helm/).
- [TLS certificates].
Though there are [many ways](https://unofficial-kubernetes.readthedocs.io/en/latest/setup/pick-right-solution/) to work with Kubernetes, for the purpose of this guide, we will be using Google's [Kubernetes Engine](https://cloud.google.com/kubernetes-engine/). That said, most of the following steps should be very similar using any other provider.
@ -36,9 +36,12 @@ Download and modify the following helm_gke.sh script and values file to match yo
Run [./scripts/helm_gke.sh] which will:
1. Provision a new cluster.
2. Create authenticate, authorize, and proxy [deployments](https://cloud.google.com/kubernetes-engine/docs/concepts/deployment).
3. Provision and apply authenticate, authorize, and proxy [services](https://cloud.google.com/kubernetes-engine/docs/concepts/service).
4. Configure an ingress, Google's default load balancer.
1. Create authenticate, authorize, and proxy [deployments](https://cloud.google.com/kubernetes-engine/docs/concepts/deployment).
1. Provision and apply authenticate, authorize, and proxy [services](https://cloud.google.com/kubernetes-engine/docs/concepts/service).
1. Configure an ingress, using Google's default load balancer.
```bash
./scripts/helm_gke.sh

9
examples/helm/helm_gke.sh
View file

@ -28,13 +28,8 @@ echo "=> install pomerium with helm"
helm install \
pomerium \
pomerium/pomerium \
--set proxy.service.type="NodePort" \
--set authenticate.service.type="NodePort" \
--set config.sharedSecret=$(head -c32 /dev/urandom | base64) \
--set config.cookieSecret=$(head -c32 /dev/urandom | base64) \
--set ingress.secret.name="pomerium-tls" \
--set ingress.secret.cert=$(base64 -i "$HOME/.acme.sh/*.corp.beyondperimeter.com_ecc/fullchain.cer") \
--set ingress.secret.key=$(base64 -i "$HOME/.acme.sh/*.corp.beyondperimeter.com_ecc/*.corp.beyondperimeter.com.key") \
--set ingress.secret.cert="$(base64 -i $HOME/.acme.sh/*.corp.beyondperimeter.com_ecc/fullchain.cer)" \
--set ingress.secret.key="$(base64 -i $HOME/.acme.sh/*.corp.beyondperimeter.com_ecc/*.corp.beyondperimeter.com.key)" \
--values docs/configuration/examples/kubernetes/values.yaml
# When done, clean up by deleting the cluster!

1
examples/kubernetes/values.yaml
View file

@ -18,6 +18,7 @@ proxy:
cloud.google.com/app-protocols: '{"https":"HTTPS"}'
config:
rootDomain: localhost.pomerium.io
policy:
- from: https://hello.localhost.pomerium.io
to: http://nginx.default.svc.cluster.local:80