mustafakirimli/cf-auth-proxy repository overview

# parameters
CF_POLICY_AUD="ABC"
CF_AUTH_DOMAIN="mydomain.cloudflareaccess.com"

# create secret (cf configs) for deployment
kubectl create secret generic cf-auth-proxy --from-literal=policy-aud="${CF_POLICY_AUD}" --from-literal=auth-domain="${CF_AUTH_DOMAIN}" --namespace=kube-system

# create deployment, svc and hpa
kubectl apply -f https://raw.githubusercontent.com/mustafakirimli/cf-auth-proxy/master/k8s/deploy.yaml

apiVersion: voyager.appscode.com/v1beta1
kind: Ingress
metadata:
  name: auth-ingress
  namespace: default
spec:
  frontendRules:
  - port: 80
    auth:
      oauth:
      - host: voyager.appscode.ninja
        authBackend: cf-auth-proxy
        authPath: /cfAuth/auth
        signinPath: /cfAuth/start
        paths: 
        - /app
  rules:
  - host: voyager.appscode.ninja
    http:
      paths:
      - path: /health
        backend:
          serviceName: test-server
          servicePort: 80
      - path: /app
        backend:
          serviceName: test-server
          servicePort: 80
      - path: /cfAuth
        backend:
          name: cf-auth-proxy
          serviceName: cf-auth-proxy.kube-system
          namespace: kube-system
          servicePort: 80