mirror of
https://github.com/openshift/community.okd.git
synced 2026-03-26 19:03:14 +00:00
037f8b1f4f
* Add openshift_auth module * add task to print out config * Attempt to configure auth * Update molecule/default/tasks/openshift_auth.yml * fix sanity test and use incluster address for now * Get integration tests passing locally * Give test user cluster-level admin permissions * Use a less verbose resource for testing * Add alias to k8s_auth for backwards compatibility
61 lines
1.6 KiB
YAML
61 lines
1.6 KiB
YAML
---
|
|
- name: Prepare
|
|
hosts: localhost
|
|
connection: local
|
|
gather_facts: no
|
|
|
|
tasks:
|
|
- pip:
|
|
name: virtualenv
|
|
|
|
- pip:
|
|
name:
|
|
- openshift>=0.9.2
|
|
- coverage
|
|
virtualenv: "{{ virtualenv }}"
|
|
virtualenv_command: "{{ virtualenv_command }}"
|
|
virtualenv_site_packages: no
|
|
|
|
- name: 'Configure htpasswd secret (username: test, password: testing123)'
|
|
community.okd.k8s:
|
|
definition:
|
|
apiVersion: v1
|
|
kind: Secret
|
|
metadata:
|
|
name: htpass-secret
|
|
namespace: openshift-config
|
|
stringData:
|
|
htpasswd: "test:$2y$05$zgjczyp96jCIp//CGmnWiefhd7G3l54IdsZoV4IwA1UWtd04L0lE2"
|
|
|
|
- name: Configure htpasswd identity provider
|
|
community.okd.k8s:
|
|
definition:
|
|
apiVersion: config.openshift.io/v1
|
|
kind: OAuth
|
|
metadata:
|
|
name: cluster
|
|
spec:
|
|
identityProviders:
|
|
- name: htpasswd_provider
|
|
mappingMethod: claim
|
|
type: HTPasswd
|
|
htpasswd:
|
|
fileData:
|
|
name: htpass-secret
|
|
|
|
- name: Create ClusterRoleBinding for test user
|
|
community.okd.k8s:
|
|
definition:
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: ClusterRoleBinding
|
|
metadata:
|
|
name: test-cluster-reader
|
|
roleRef:
|
|
apiGroup: rbac.authorization.k8s.io
|
|
kind: ClusterRole
|
|
name: cluster-reader
|
|
subjects:
|
|
- apiGroup: rbac.authorization.k8s.io
|
|
kind: User
|
|
name: test
|