gabibbo97/dex
Chart version: 4.0.2
Api version: v2
App version: v2.27.0
OpenID Connect Identity (OIDC) and OAuth 2.0 Provider with Plug...
application
Chart Type
Active
Status
Unknown
License
3272
Downloads
https://gabibbo97.github.io/charts
Set me up:
helm repo add center https://repo.chartcenter.io
Install Chart:
helm install dex center/gabibbo97/dex
Versions (0)
View all
dex
dex is an OpenID Connect Identity (OIDC) and OAuth 2.0 Provider with Pluggable Connectors
TL;DR
helm install gabibbo97/dex
Introduction
This chart bootstraps an in-cluster dex identity provider
Configuration options
| Parameter | Description | Default |
|---|---|---|
connectors |
List of Dex connectors | [] |
staticClients |
List of Dex clients | [] |
staticPasswords |
List of Dex users | [] |
JSONLogging |
Enable JSON format for logs | false |
dexExternalURL |
URL that Dex will use as its own | Value of ingress.hosts[0].host |
OAuth2.responseTypes |
The OAuth2 flows that will be supported | ['code'] |
OAuth2.skipApprovalScreen |
If possible avoid showing an approval screen | true |
OAuth2.alwaysShowLoginScreen |
Always show a login screen | false |
OAuth2.passwordConnector |
Use one of the predefined connectors instead of Dex to perform password grants | “ |
prometheusOperator.serviceMonitor.enable |
Deploy a ServiceMonitor resource |
false |
Connectors
See the documentation for details
connectors:
- type: <Connector kind>
name: <Connector name>
id: <Connector ID>
config:
<YAML Configuration>
Static clients
staticClients:
- id: <Client ID>
redirectURIs:
- <Redirect URI pattern>
name: <Client name>
secret: <Client secret>
# Allow other client to issue tokens
# Valid for this one
# e.g. auth webapp and backend
trustedPeers:
- <Other client ID>
Easy generation of client secrets
tr -dc a-zA-Z0-9 < /dev/urandom | head -c 32; echo ''
Static passwords
- email: "<email>"
hash: "<bcrypt hash>"
username: "<username>"
Easy generation of bcrypt secrets
htpasswd -bnBC 10 "usr" <Password> | cut -d ':' -f 2 | sed 's/2y/2a/'
Trying out your Dex installation
kubectl port-forward svc/dex 5555:http
curl -k 127.0.0.1:5555/.well-known/openid-configuration | jq
Advanced configuration
This chart provides a plug and play installation of Dex.
If you desire to manually configure Dex you can set up the variables dexConfig and dexEnvironment to have a completely custom installation of Dex.