Simple form for getting dex credentials from Kubernetes
95
Simple go application to recover the id token and refresh token from Dex to use it with Kubernetes
Just hitting the big ol' buton should provide an appropriate token, along with instructions on how to configure it. You can also request extra scopes by introducing them in the form.
Building the docker container should also build the application itself.
Inside the container, the /usr/local/bin/form binary takes the following options:
| Parameter | Default | What it does |
|---|---|---|
| client-id | kubernetes | The oauth2 client id for authenticating with dex |
| client-secret | The client secret for Dex | |
| scopes | groups | Default list of scopes to request |
| redirect-uri | http://127.0.0.1:5555/callback | Callback url for Oauth2 response |
| issuer | http://127.0.0.1:5556/dex | Url of the OpenID issuer (Dex) |
| listen | http://127.0.0.1:5555 | interface, port and protocol to listen on |
| tls-cert | Tls certificate to use when listening with https | |
| tls-key | Tls key to use when listening with https | |
| issuer-root-ca | Root CA to trust. If empty, the host truststore | |
| debug | If present, logs all request to the OpenID issuer |
When running it with docker, you can pass the options as docker cmd:
docker run yoigo/dex-form --redirect-uri https://auth.example.org --issuer https://auth.example.org/dex --listen http://0.0.0.0:5555
Based on CoreOS' dex example app
docker pull yoigo/dex-form