Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Install for Remote Outpost on K8S needs updating #128

Open
projx opened this issue Nov 9, 2022 · 1 comment
Open

Install for Remote Outpost on K8S needs updating #128

projx opened this issue Nov 9, 2022 · 1 comment
Labels
bug Something isn't working

Comments

@projx
Copy link

projx commented Nov 9, 2022

Describe the bug
When installing a Remote Outpost (see following link) via Helm, the post install script generate will not work with Kubernetes >= v1.2.4, as K8S no longer automatically generates User Tokens, so a step needs to be added to this, in addition, this seems to break the current method of getting the CA.

To Reproduce

  1. Install the remote output using the

    helm install my-authentik-remote-cluster goauthentik/authentik-remote-cluster --version

  2. A script will be outputted, that will generate the YML to import into Authentik

** Possible Alternative Script **

I've made some modifications to the original script, which now works with v1.2.4:

        # your server name goes here
        KUBE_API=https://localhost:8443
        SERVICE_ACCOUNT=svr-authentik-authentik-remote-cluster

        KUBE_CA=$(kubectl config view --minify --raw --output 'jsonpath={..cluster.certificate-authority-data}')
        KUBE_TOKEN=$(kubectl create token $SERVICE_ACCOUNT )

        echo "apiVersion: v1
        kind: Config
        clusters:
        - name: default-cluster
        cluster:
            certificate-authority-data: ${KUBE_CA}
            server: ${KUBE_API}
        contexts:
        - name: default-context
        context:
            cluster: default-cluster
            namespace: default
            user: authentik-user
        current-context: default-context
        users:
        - name: authentik-user
        user:
            token: ${KUBE_TOKEN}" 

The old script still probably works with < v1.24, so you may want to just output this in addition, with a message basically saying "If your using v1.24+ then use this instead:"

@projx projx added the bug Something isn't working label Nov 9, 2022
@stale
Copy link

stale bot commented Jan 8, 2023

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

@stale stale bot added the wontfix This will not be worked on label Jan 8, 2023
@stale stale bot closed this as completed Jan 15, 2023
@BeryJu BeryJu removed the wontfix This will not be worked on label Jan 16, 2023
@BeryJu BeryJu transferred this issue from goauthentik/authentik Jan 16, 2023
@BeryJu BeryJu reopened this Jan 16, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests

2 participants