3pp-mirror/pomerium
1
0
Fork 0
mirror of https://github.com/pomerium/pomerium.git synced 2025-06-13 08:13:09 +02:00
Code Issues Projects Releases Packages Wiki Activity

docs: update helm_gke script and docs

Browse source
This commit is contained in:
Bobby DeSimone 2019-03-29 11:41:37 -07:00
parent 5284c8c32b
commit 8ead5b2a7e
No known key found for this signature in database
GPG key ID: AEE4CF12FE86D07E
2 changed files with 11 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

6
docs/docs/examples.md
View file

@ -65,7 +65,11 @@ Customize for your identity provider run `docker-compose up -f nginx.docker-comp
- Routes default to hosted version of httpbin.org - Routes default to hosted version of httpbin.org
- Includes all-in-one script - Includes all-in-one script
#### kubernetes_gke.sh #### Auto-magically with helm
<<< @/scripts/helm_gke.sh
#### Manually with kubernetes
<<< @/scripts/kubernetes_gke.sh <<< @/scripts/kubernetes_gke.sh

8
scripts/helm_gke.sh
View file

@ -4,6 +4,7 @@
# NOTE! This will create real resources on Google's cloud. Make sure you clean up any unused # NOTE! This will create real resources on Google's cloud. Make sure you clean up any unused
# resources to avoid being billed. For reference, this tutorial cost me <10 cents for a couple of hours. # resources to avoid being billed. For reference, this tutorial cost me <10 cents for a couple of hours.
# NOTE! You must change the identity provider client secret setting, and service account setting! # NOTE! You must change the identity provider client secret setting, and service account setting!
# NOTE! If using gsuite, you should also set `authenticate.idp.serviceAccount`, see docs for more info !
echo "=> [GCE] creating cluster" echo "=> [GCE] creating cluster"
gcloud container clusters create pomerium gcloud container clusters create pomerium
@ -42,8 +43,11 @@ helm install ./helm/ \
--set ingress.secret.key=$(base64 -i "$HOME/.acme.sh/*.corp.pomerium.io_ecc/*.corp.pomerium.io.key") \ --set ingress.secret.key=$(base64 -i "$HOME/.acme.sh/*.corp.pomerium.io_ecc/*.corp.pomerium.io.key") \
--set config.policy="$(cat policy.example.yaml | base64)" \ --set config.policy="$(cat policy.example.yaml | base64)" \
--set authenticate.idp.provider="google" \ --set authenticate.idp.provider="google" \
--set authenticate.idp.clientID="REPLACE_ME.apps.googleusercontent.com" \ --set authenticate.idp.clientID="REPLACE_ME" \
--set authenticate.idp.clientSecret="REPLACE_ME" --set authenticate.idp.clientSecret="REPLACE_ME" \
--set authenticate.idp.serviceAccount="REPLACE_ME" \
--set-string ingress.annotations."kubernetes\.io/ingress\.allow-http"=false \
--set ingress.annotations."cloud\.google\.com/app-protocols"=\"{\"https\":\"HTTPS\"}\"
# When done, clean up by deleting the cluster! # When done, clean up by deleting the cluster!
# helm del $(helm ls --all --short) --purge # deletes all your helm instances # helm del $(helm ls --all --short) --purge # deletes all your helm instances