Dex: [Question] Deploying dex in Kubernetes and running in aws - docs

[alok87]

What?

We want to run dex.example.com in Kubernetes and use it not for kubernetes authentication but for our apps authentication

This document talks about using Dex for Kubernetes auth -https://github.com/coreos/dex/blob/master/Documentation/kubernetes.md

We do not want 3rd party resources for it, we just want to run it in Kubernetes. Any doc for it?

Got the below errors on following the above doc

2018/04/09 16:17:37 http: TLS handshake error from 100.118.128.0:22684: EOF
2018/04/09 16:17:46 keys expired, rotating
2018/04/09 16:17:47 failed to rotate keys: not found
2018/04/09 16:17:54 failed creating third party resources: not found
2018/04/09 16:18:08 garbage collection failed: failed to list auth requests: not found
2018/04/09 16:18:10 http: TLS handshake error from 100.118.128.0:53449: EOF
2018/04/09 16:18:10 http: TLS handshake error from 100.115.0.0:63416: EOF
2018/04/09 16:18:17 keys expired, rotating
2018/04/09 16:18:18 failed to rotate keys: not found
2018/04/09 16:18:24 failed creating third party resources: not found

Also is there an option to start it in HTTP mode instead of HTTPS?

[sandromello]

The default mode of Dex is running with Kubernetes CRD (old TPR) as the storage backend, if you want another storage option you'll need to change the configuration file:
https://github.com/coreos/dex/blob/master/Documentation/storage.md

[alok87]

@sandromello

• I want to just run it (without CRDs, dont want to authenticate Kubernetes, my purpose is different), i want to just run dex.example.com in Kubernetes and use dex.example.com to authenticate my myapp.example.com

• Can't we boot it up like any other service in Kubernetes. Also cant user take care of routing anyway he likes ? I want to run it as HTTP service and do SSL termination before in our WEB Server

There are no documents of making dex up and running or it it there for this case?. Every document i found till now assumes the dex is running :) Need a little help here. I would like to contribute to making the document once i make it running.

[nabadger]

@alok87

There's a few helm charts for Dex available - this is probably a good way to get started - if you don't run the Tiller component, you can still use helm template to generate the manifest file and use that directly.

We wrote one here: https://github.com/mintel/dex-k8s-authenticator/tree/master/charts/dex

It also looks like there's a recent (official?) one here https://github.com/kubernetes/charts/tree/master/stable/dex

Once you have it running in k8s, you can use it for anything (for example we use it as a means to authenticate apps via keycloak-proxy or oauth2_proxy)

[srenatus]

@nabadger There's some discussion about that github.com/kubernetes/charts chart in #1281. (Want to join forces, by any chance?)

I think both charts would warrant being included in the README, for easier discovery 🤔