Skip to content

Commit

Permalink
Simplify authentication setup docs
Browse files Browse the repository at this point in the history 
Signed-off-by: Haytham Abuelfutuh <[email protected]>
  • Loading branch information
@EngHabu
EngHabu committed Apr 30, 2021
1 parent 9789656 commit 4efaa7b
Show file tree
Hide file tree
Showing 10 changed files with 494 additions and 163 deletions.
83 changes: 79 additions & 4 deletions deployment/eks/flyte_generated.yaml
View file
Original file line number Diff line number Diff line change
Expand Up @@ -8157,13 +8157,35 @@ data:
grpcPort: 8089
security:
secure: false
useAuth: false
useAuth: true
allowCors: true
allowedOrigins:
# Accepting all domains for Sandbox installation
- "*"
allowedHeaders:
- "Content-Type"
secrets:
secrets-prefix: /etc/secrets/auth/
auth:
disableForGrpc: true
httpPublicUri: http://localhost:30081/
appAuth:
thirdPartyConfig:
flyteClient:
clientId: flytectl
redirectUri: https://localhost:53593/callback
scopes:
- offline
- all
userAuth:
openId:
baseUrl: https://accounts.google.com
scopes:
- profile
- openid
clientId: 657465813211-6eog7ek7li5k7i7fvgv2921075063hpe.apps.googleusercontent.com
callbackUrl: "http://localhost:30081/callback"
redirectUrl: "/api/v1/projects"
flyteadmin:
roleNameKey: "iam.amazonaws.com/role"
profilerPort: 10254
Expand Down Expand Up @@ -8207,7 +8229,7 @@ data:
gpu: 1
kind: ConfigMap
metadata:
name: flyte-admin-config-t2f9g68k65
name: flyte-admin-config-7g4m67fbc4
namespace: flyte
---
apiVersion: v1
Expand Down Expand Up @@ -8392,6 +8414,13 @@ metadata:
type: Opaque
---
apiVersion: v1
kind: Secret
metadata:
name: flyte-admin-auth
namespace: flyte
type: Opaque
---
apiVersion: v1
kind: Service
metadata:
annotations:
Expand Down Expand Up @@ -8733,6 +8762,8 @@ spec:
name: config-volume
- mountPath: /etc/db
name: db-pass
- mountPath: /etc/secrets/auth
name: auth
- command:
- sh
- -c
Expand Down Expand Up @@ -8801,19 +8832,63 @@ spec:
name: config-volume
- mountPath: /etc/db
name: db-pass
- args:
- --localPath
- /etc/secrets/auth-new
command:
- flyteadmin
- --config
- /etc/flyte/config/*.yaml
- secrets
- init
image: ghcr.io/flyteorg/flyteadmin:v0.4.7
imagePullPolicy: IfNotPresent
name: generate-secrets
volumeMounts:
- mountPath: /etc/flyte/config
name: config-volume
- mountPath: /etc/secrets/auth-new
name: new-auth-secrets
- args:
- --fromPath
- /etc/secrets/auth-new
command:
- flyteadmin
- --config
- /etc/flyte/config/*.yaml
- secrets
- create
env:
- name: POD_NAMESPACE
valueFrom:
fieldRef:
fieldPath: metadata.namespace
image: ghcr.io/flyteorg/flyteadmin:v0.4.7
imagePullPolicy: IfNotPresent
name: save-secrets
volumeMounts:
- mountPath: /etc/flyte/config
name: config-volume
- mountPath: /etc/secrets/auth-new
name: new-auth-secrets
serviceAccountName: flyteadmin
volumes:
- emptyDir: {}
name: shared-data
- configMap:
name: flyte-admin-config-t2f9g68k65
name: flyte-admin-config-7g4m67fbc4
name: config-volume
- configMap:
name: clusterresource-template-tkdkkt4cb5
name: resource-templates
- name: db-pass
secret:
secretName: db-pass-bthd2588cc
- name: auth
secret:
secretName: flyte-admin-auth
- emptyDir: {}
name: new-auth-secrets
---
apiVersion: apps/v1
kind: Deployment
Expand Down Expand Up @@ -9086,7 +9161,7 @@ spec:
name: clusterresource-template-tkdkkt4cb5
name: resource-templates
- configMap:
name: flyte-admin-config-t2f9g68k65
name: flyte-admin-config-7g4m67fbc4
name: config-volume
- name: db-pass
secret:
Expand Down
83 changes: 79 additions & 4 deletions deployment/gcp/flyte_generated.yaml
View file
Original file line number Diff line number Diff line change
Expand Up @@ -8148,13 +8148,35 @@ data:
grpcPort: 8089
security:
secure: false
useAuth: false
useAuth: true
allowCors: true
allowedOrigins:
# Accepting all domains for Sandbox installation
- "*"
allowedHeaders:
- "Content-Type"
secrets:
secrets-prefix: /etc/secrets/auth/
auth:
disableForGrpc: true
httpPublicUri: http://localhost:30081/
appAuth:
thirdPartyConfig:
flyteClient:
clientId: flytectl
redirectUri: https://localhost:53593/callback
scopes:
- offline
- all
userAuth:
openId:
baseUrl: https://accounts.google.com
scopes:
- profile
- openid
clientId: 657465813211-6eog7ek7li5k7i7fvgv2921075063hpe.apps.googleusercontent.com
callbackUrl: "http://localhost:30081/callback"
redirectUrl: "/api/v1/projects"
flyteadmin:
roleNameKey: "iam.amazonaws.com/role"
profilerPort: 10254
Expand Down Expand Up @@ -8198,7 +8220,7 @@ data:
gpu: 1
kind: ConfigMap
metadata:
name: flyte-admin-config-7k2dmcb4tg
name: flyte-admin-config-27ggcgm724
namespace: flyte
---
apiVersion: v1
Expand Down Expand Up @@ -8379,6 +8401,13 @@ metadata:
type: Opaque
---
apiVersion: v1
kind: Secret
metadata:
name: flyte-admin-auth
namespace: flyte
type: Opaque
---
apiVersion: v1
kind: Service
metadata:
name: cloudsqlproxy
Expand Down Expand Up @@ -8765,6 +8794,8 @@ spec:
name: config-volume
- mountPath: /etc/db
name: db-pass
- mountPath: /etc/secrets/auth
name: auth
- command:
- sh
- -c
Expand Down Expand Up @@ -8833,19 +8864,63 @@ spec:
name: config-volume
- mountPath: /etc/db
name: db-pass
- args:
- --localPath
- /etc/secrets/auth-new
command:
- flyteadmin
- --config
- /etc/flyte/config/*.yaml
- secrets
- init
image: ghcr.io/flyteorg/flyteadmin:v0.4.7
imagePullPolicy: IfNotPresent
name: generate-secrets
volumeMounts:
- mountPath: /etc/flyte/config
name: config-volume
- mountPath: /etc/secrets/auth-new
name: new-auth-secrets
- args:
- --fromPath
- /etc/secrets/auth-new
command:
- flyteadmin
- --config
- /etc/flyte/config/*.yaml
- secrets
- create
env:
- name: POD_NAMESPACE
valueFrom:
fieldRef:
fieldPath: metadata.namespace
image: ghcr.io/flyteorg/flyteadmin:v0.4.7
imagePullPolicy: IfNotPresent
name: save-secrets
volumeMounts:
- mountPath: /etc/flyte/config
name: config-volume
- mountPath: /etc/secrets/auth-new
name: new-auth-secrets
serviceAccountName: flyteadmin
volumes:
- emptyDir: {}
name: shared-data
- configMap:
name: flyte-admin-config-7k2dmcb4tg
name: flyte-admin-config-27ggcgm724
name: config-volume
- configMap:
name: clusterresource-template-tkdkkt4cb5
name: resource-templates
- name: db-pass
secret:
secretName: db-pass-bthd2588cc
- name: auth
secret:
secretName: flyte-admin-auth
- emptyDir: {}
name: new-auth-secrets
---
apiVersion: apps/v1
kind: Deployment
Expand Down Expand Up @@ -9118,7 +9193,7 @@ spec:
name: clusterresource-template-tkdkkt4cb5
name: resource-templates
- configMap:
name: flyte-admin-config-7k2dmcb4tg
name: flyte-admin-config-27ggcgm724
name: config-volume
- name: db-pass
secret:
Expand Down
Loading

0 comments on commit 4efaa7b

Please sign in to comment.