7.2.4. Keystone CR 示例

apiVersion: config.openshift.io/v1
kind: OAuth
metadata:
  name: cluster
spec:
  identityProviders:
  - name: keystoneidp 
    mappingMethod: claim 
    type: Keystone
    keystone:
      domainName: default 
      url: https://keystone.example.com:5000 
      ca: 
        name: ca-config-map
      tlsClientCert: 
        name: client-cert-secret
      tlsClientKey: 
        name: client-key-secret

apiVersion: config.openshift.io/v1
kind: OAuth
metadata:
  name: cluster
spec:
  identityProviders:
  - name: keystoneidp 

    mappingMethod: claim 

    type: Keystone
    keystone:
      domainName: default 

      url: https://keystone.example.com:5000 

      ca: 

        name: ca-config-map
      tlsClientCert: 

        name: client-cert-secret
      tlsClientKey: 

        name: client-key-secret