wip: example app

examples/authenticated-app/resources/app-deployment.yaml

@@ -0,0 +1,40 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  labels:
+    io.kompose.service: app
+  name: app
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      io.kompose.service: app
+  strategy:
+    type: Recreate
+  template:
+    metadata:
+      labels:
+        io.kompose.service: app
+    spec:
+      containers:
+        - image: bornholm/oidc-test:v0.0.0-1-g936a77e
+          name: app
+          ports:
+            - containerPort: 8080
+          resources: {}
+          env:
+            - name: LOG_LEVEL
+              value: "0"
+            - name: HTTP_ADDRESS
+              value: 0.0.0.0:8080
+            - name: OIDC_CLIENT_ID
+              value: oidc-test
+            - name: OIDC_CLIENT_SECRET
+              value: oidc-test-123456
+            - name: OIDC_ISSUER_URL
+              value: http://ssokustom:8080/auth
+            - name: OIDC_REDIRECT_URL
+              value: http://ssokustom:8080
+            - name: OIDC_POST_LOGOUT_REDIRECT_URL
+              value: http://ssokustom:8080
+      restartPolicy: Always

examples/authenticated-app/resources/app-service.yaml

@@ -0,0 +1,15 @@
+apiVersion: v1
+kind: Service
+metadata:
+  labels:
+    io.kompose.service: app
+  name: app
+spec:
+  ports:
+    - name: http
+      port: 8080
+      targetPort: 8080
+  selector:
+    io.kompose.service: app
+status:
+  loadBalancer: {}

examples/authenticated-app/resources/ingress-prefix-traefik-middleware.yaml

@@ -0,0 +1,10 @@
+apiVersion: traefik.containo.us/v1alpha1
+kind: Middleware
+metadata:
+  name: ingress-prefix
+spec:
+  stripPrefixRegex:
+    regex:
+      - ^/auth/dispatcher
+      - ^/auth/saml
+      - ^/auth

examples/authenticated-app/resources/ingress.yaml

@@ -0,0 +1,43 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: portal
+  annotations:
+    ingress.kubernetes.io/ssl-redirect: "false"
+    traefik.ingress.kubernetes.io/router.middlewares: default-ingress-prefix@kubernetescrd
+spec:
+  rules:
+  - http:
+      paths:
+      - path: /
+        pathType: Prefix
+        backend:
+          service:
+            name: app
+            port:
+              name: http
+      
+      - path: /auth/dispatcher
+        pathType: Prefix
+        backend:
+          service:
+            name: hydra-dispatcher
+            port:
+              name: http
+      
+      - path: /auth
+        pathType: Prefix
+        backend:
+          service:
+            name: hydra
+            port:
+              name: hydra-public
+          
+      # - path: /auth/passwordless/?(.*)
+      #   pathType: Prefix
+      #   backend:
+      #     service:
+      #       name: hydra
+      #       port:
+      #         name: http-public
+          

examples/authenticated-app/resources/port-forwarder-deployment.yaml

@@ -0,0 +1,29 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  labels:
+    io.kompose.service: port-forwarder
+  name: port-forwarder
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      io.kompose.service: port-forwarder
+  strategy:
+    type: Recreate
+  template:
+    metadata:
+      labels:
+        io.kompose.service: port-forwarder
+    spec:
+      containers:
+        - image: hpello/tcp-proxy:latest
+          name: port-forwarder
+          env:
+            - name: LISTEN_PORT
+              value: "8080"
+          ports:
+            - containerPort: 8080
+          resources: {}
+          args: ["traefik.kube-system.svc.cluster.local", "80"]
+      restartPolicy: Always

examples/authenticated-app/resources/port-forwarder-service.yaml

@@ -0,0 +1,12 @@
+kind: Service
+apiVersion: v1
+metadata:
+  name: ssokustom
+  labels:
+    io.kompose.service: port-forwarder
+spec:
+  ports:
+  - port: 8080
+    targetPort: 8080
+  selector:
+    io.kompose.service: port-forwarder