Merge "Treasuremap - Dex, API server & LDAP integration"

manifests/function/dex-aio/README.md

@@ -1,10 +1,41 @@
 # DEX-AIO function
 
 The DEX-AIO function implements the Dex Authentication service.
-It contains the HelmRelease manifest for dex-aio, the dex-aio secrets
-for the key and certificates, and the cluster issuer for dex-aio.
+It contains the HelmRelease manifest for **dex-aio**, which contains
+the LDAP connector customization as well as certificates to be used.
 
-TODO: The values are "hard-coded" for this version that can be made more
-flexible later with Kustomization transformers. A shared catalogue
-between "dex-aio" function and "type/multi-tenant/ephemeral/controlplane/dex-apiserver"
-shall be provided to ensure synchronization between them.
+The certificate (Secret) used by **dex-aio** will be generated by the
+cert-manager, which will be signed by CA that is generated in
+the Ephemeral cluster and copied to the Target cluster during the
+***airshipctl phase run clusterctl-move*** operation.
+
+Before you can deploy this helm release, you will need to update the following:
+
+```yaml
+      ldap:
+        bind_password: "your LDAP bind password"
+        config:
+          host: "your LDAP FQDN"
+          bind_dn: "your LDAP bind username"
+```
+
+Also, in the same helm release you will need to update the search criteria for
+the user and group based on your LDAP schema. See the attributes under
+**spec.values.ldap** to update below:
+
+```yaml
+      user_search:
+        base_dn: dc=testservices,dc=test,dc=com
+        filter: "(objectClass=person)"
+        username: cn
+        idAttr: cn
+        emailAttr: name
+        nameAttr: name
+      group_search:
+        base_dn: ou=groups,dc=testservices,dc=test,dc=com
+        filter: "(objectClass=group)"
+        userMatchers:
+          userAttr: name
+          groupAttr: member
+        nameAttr: name
+```

manifests/function/dex-aio/dex-cert-issuer.yaml

@@ -0,0 +1,8 @@
+apiVersion: cert-manager.io/v1alpha2
+kind: Issuer
+metadata:
+  name: workload-cluster-ca-issuer
+  namespace: default
+spec:
+  ca:
+    secret: dex-apiserver-secret

manifests/function/dex-aio/dex-certs-issuer.yaml

@@ -1,8 +0,0 @@
----
-apiVersion: cert-manager.io/v1alpha3
-kind: ClusterIssuer
-metadata:
-  name: dex-ca-issuer
-spec:
-  ca:
-    secretName: dex-ca-key-pair

manifests/function/dex-aio/dex-certs-secrets.yaml

@@ -1,9 +0,0 @@
----
-apiVersion: v1
-kind: Secret
-metadata:
-  name: dex-ca-key-pair
-  namespace: cert-manager
-data:
-  tls.crt: dGVtcG9yYWx5IGR1bW15IHRscy5jcnQgZGF0YSBmb3IgdGVzdCBwdXJwb3NlCg==
-  tls.key: dGVtcG9yYWx5IGR1bW15IHRscy5rZXkgZGF0YSBmb3IgdGVzdCBwdXJwb3NlCg==

manifests/function/dex-aio/dex-helmrelease.yaml

@@ -29,7 +29,7 @@ apiVersion: helm.toolkit.fluxcd.io/v2beta1
 kind: HelmRelease
 metadata:
   name: dex-aio
-  namespace: dex
+  namespace: default
 spec:
   releaseName: dex-aio
   targetNamespace: dex
@@ -50,18 +50,47 @@ spec:
   values:
     params:
       site:
-        name: Dex-Function
+        name: dex-test-site
       endpoints:
-        hostname: dex.fuction.local
+        hostname: dex.function.local
         port:
-          https: 30556
-          http: 30554
-          k8s: 8443
+          https: 32556
+          http: 32554
+          k8s: 6443
+        tls:
+          cert_manager: true
+          issuer:
+            name: workload-cluster-ca-issuer
+            kind: Issuer
       oidc:
         client_id: function-kubernetes
         client_secret: pUBnBOY80SnXgjibTYM9ZWNzY2xreNGQok
-      tls:
-        cert_manager: true
-        issuer:
-          name: dex-ca-issuer
-          kind: ClusterIssuer
+      ldap:
+        bind_password: "your LDAP bind password"
+        name: "LDAP TEST SERVICES"
+        config:
+          host: "your LDAP FQDN"
+          port: 636
+          bind_dn: "your LDAP bind username"
+          bind_pw_env: LDAP_BIND_PW
+          username_prompt: SSO Username
+          user_search:
+            base_dn: dc=testservices,dc=test,dc=com
+            filter: "(objectClass=person)"
+            username: cn
+            idAttr: cn
+            emailAttr: name
+            nameAttr: name
+          group_search:
+            base_dn: ou=groups,dc=testservices,dc=test,dc=com
+            filter: "(objectClass=group)"
+            userMatchers:
+              userAttr: name
+              groupAttr: member
+            nameAttr: name
+
+    over_rides:
+      service:
+        dex:
+          spec:
+            type: NodePort

manifests/function/dex-aio/kustomization.yaml

@@ -2,6 +2,5 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 
 resources:
-- dex-certs-secrets.yaml
-- dex-certs-issuer.yaml
+- dex-cert-issuer.yaml
 - dex-helmrelease.yaml

manifests/function/dex-aio/replacements/kustomization.yaml

@@ -1,2 +0,0 @@
-resources:
-  - versions.yaml

manifests/function/dex-aio/replacements/versions.yaml

@@ -1,168 +0,0 @@
-apiVersion: airshipit.org/v1alpha1
-kind: ReplacementTransformer
-metadata:
-  name: dex-aio-versions-replacements
-  annotations:
-    config.kubernetes.io/function: |-
-      container:
-        image: quay.io/airshipit/replacement-transformer:latest
-replacements:
-# Helm repository
-- source:
-    objref:
-      kind: VersionsCatalogue
-      name: versions-treasuremap
-    fieldref: "{.spec.helm_repositories.dex-aio}"
-  target:
-    objref:
-      kind: HelmRepository
-      name: dex-helm-repo
-    fieldrefs: ["{.spec}"]
-
-# chart
-- source:
-    objref:
-      kind: VersionsCatalogue
-      name: versions-treasuremap
-    fieldref: "{.spec.charts.dex-aio.chart}"
-  target:
-    objref:
-      kind: HelmRelease
-      name: dex-aio
-    fieldrefs: ["{.spec.chart.spec.chart}"]
-- source:
-    objref:
-      kind: VersionsCatalogue
-      name: versions-treasuremap
-    fieldref: "{.spec.charts.dex-aio.version}"
-  target:
-    objref:
-      kind: HelmRelease
-      name: dex-aio
-    fieldrefs: ["{.spec.chart.version}"]
-
-# images
-# dex image components
-- source:
-    objref:
-      kind: VersionsCatalogue
-      name: versions-treasuremap
-    fieldref: "{.spec.image_components.dex-aio.dex.tag}"
-  target:
-    objref:
-      kind: HelmRelease
-      name: dex-aio
-    fieldrefs: ["{.spec.values.images.applications.dex.tag}"]
-- source:
-    objref:
-      kind: VersionsCatalogue
-      name: versions-treasuremap
-    fieldref: "{.spec.image_components.dex-aio.dex.name}"
-  target:
-    objref:
-      kind: HelmRelease
-      name: dex-aio
-    fieldrefs: ["{.spec.values.images.applications.dex.name}"]
-- source:
-    objref:
-      kind: VersionsCatalogue
-      name: versions-treasuremap
-    fieldref: "{.spec.image_components.dex-aio.dex.repository}"
-  target:
-    objref:
-      kind: HelmRelease
-      name: dex-aio
-    fieldrefs: ["{.spec.values.images.applications.dex.repo}"]
-# nginx image components
-- source:
-    objref:
-      kind: VersionsCatalogue
-      name: versions-treasuremap
-    fieldref: "{.spec.image_components.dex-aio.nginx.tag}"
-  target:
-    objref:
-      kind: HelmRelease
-      name: dex-aio
-    fieldrefs: ["{.spec.values.images.applications.nginx.tag}"]
-- source:
-    objref:
-      kind: VersionsCatalogue
-      name: versions-treasuremap
-    fieldref: "{.spec.image_components.dex-aio.nginx.name}"
-  target:
-    objref:
-      kind: HelmRelease
-      name: dex-aio
-    fieldrefs: ["{.spec.values.images.applications.nginx.name}"]
-- source:
-    objref:
-      kind: VersionsCatalogue
-      name: versions-treasuremap
-    fieldref: "{.spec.image_components.dex-aio.nginx.repository}"
-  target:
-    objref:
-      kind: HelmRelease
-      name: dex-aio
-    fieldrefs: ["{.spec.values.images.applications.nginx.repo}"]
-# authenticator
-- source:
-    objref:
-      kind: VersionsCatalogue
-      name: versions-treasuremap
-    fieldref: "{.spec.image_components.dex-aio.authenticator.tag}"
-  target:
-    objref:
-      kind: HelmRelease
-      name: dex-aio
-    fieldrefs: ["{.spec.values.images.applications.authenticator.tag}"]
-- source:
-    objref:
-      kind: VersionsCatalogue
-      name: versions-treasuremap
-    fieldref: "{.spec.image_components.dex-aio.authenticator.name}"
-  target:
-    objref:
-      kind: HelmRelease
-      name: dex-aio
-    fieldrefs: ["{.spec.values.images.applications.authenticator.name}"]
-- source:
-    objref:
-      kind: VersionsCatalogue
-      name: versions-treasuremap
-    fieldref: "{.spec.image_components.dex-aio.authenticator.repository}"
-  target:
-    objref:
-      kind: HelmRelease
-      name: dex-aio
-    fieldrefs: ["{.spec.values.images.applications.authenticator.repo}"]
-# tls_init
-- source:
-    objref:
-      kind: VersionsCatalogue
-      name: versions-treasuremap
-    fieldref: "{.spec.image_components.dex-aio.tls_init.tag}"
-  target:
-    objref:
-      kind: HelmRelease
-      name: dex-aio
-    fieldrefs: ["{.spec.values.images.applications.tls_init.tag}"]
-- source:
-    objref:
-      kind: VersionsCatalogue
-      name: versions-treasuremap
-    fieldref: "{.spec.image_components.dex-aio.tls_init.name}"
-  target:
-    objref:
-      kind: HelmRelease
-      name: dex-aio
-    fieldrefs: ["{.spec.values.images.applications.tls_init.name}"]
-- source:
-    objref:
-      kind: VersionsCatalogue
-      name: versions-treasuremap
-    fieldref: "{.spec.image_components.dex-aio.tls_init.repository}"
-  target:
-    objref:
-      kind: HelmRelease
-      name: dex-aio
-    fieldrefs: ["{.spec.values.images.applications.tls_init.repo}"]

manifests/site/test-site/target/catalogues/networking.yaml

@@ -16,4 +16,11 @@ spec:
   ironic:
     provisioningIp: "10.23.24.102"
     dhcpRange: "10.23.24.200,10.23.24.250"
-
+  # Update the attribute "address" for both entries
+  # with your DNS IPs below if you are behind a proxy
+  commonHostNetworking:
+    services:
+      - address: 8.8.8.8
+        type: dns
+      - address: 8.8.4.4
+        type: dns

manifests/site/test-site/target/generator/results/generated/secrets.yaml

@@ -1,48 +1,51 @@
 apiVersion: airshipit.org/v1alpha1
 ephemeralClusterCa:
-  crt: 'ENC[AES256_GCM,data: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,iv:+GaLzo3IZQUbrKH+DwoClgPxECOkhyNkKwu6jj9TFes=,tag:7Gouyh6wTV0YG+MMkC+4bQ==,type:str]'
-  key: 'ENC[AES256_GCM,data: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,iv:JYJ5gIun3lEN156HbX36zhtDMOjUgPBWeGqRBsu/8Kc=,tag:Sopg+BPB6Q3BIlz3doAx9w==,type:str]'
+  crt: 'ENC[AES256_GCM,data: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,iv:q015BzWXk/U35vJya9YYiZt52NaEZzZWPYeEqDkm8Vg=,tag:7JQ2DJk5aOi15oN4wCNIzw==,type:str]'
+  key: 'ENC[AES256_GCM,data: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,iv:3wbY34JUXLPH0s20OWZ3hxIv7uLYaQhybIsLlRWT/14=,tag:xVko87JKSO5SUeggGk6FJA==,type:str]'
 ephemeralKubeconfig:
-  certificate-authority-data: 'ENC[AES256_GCM,data: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,iv:KxGVXmvi0AMbUQ1YAJTpYH5dIBA6ownuLtsI0K8Riko=,tag:j3HdCtl9Ptj6UH0otSsLJA==,type:str]'
-  client-certificate-data: 'ENC[AES256_GCM,data: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,iv:l0za+exweqGI4ND3zfdLELyAy9fUsf6GAxgc552p64o=,tag:sUdZIebwysPNteocS618lQ==,type:str]'
-  client-key-data: 'ENC[AES256_GCM,data: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,iv:QfiqUy0j3UUyhgyBZrTxdZV1MHb8+fugIanpWDOrzX8=,tag:y7lmjUQD6mBOTcEZBL/iyw==,type:str]'
+  certificate-authority-data: 'ENC[AES256_GCM,data:dv8mAvXa40e/k3SsXrpwq6lnSuRRk1dmhilXDpnJdlMyTL2gb7y+XwhmsWSGM2UtaCyGHwcrOwSqHZaIwcAxGCCGakYmHec9A4svJeVaDd+gu2LSQFzHZLyf9L+JANvf0sowvkosB7YTLWLe/uiZqBo2XC8lvRWsctjV8pmoL4E4y+M8OzZEjoHevPJacDWgg+bfI/sIb+cPZYQ7TfGRxtapSx5WDaowyB6VbXvvlQ7G/ReOy4m197vTtx7i57tLpW9fNnJxtEQCJ/bOvzuc/l+wqMa0y/Ywilap4KJT0HsshGXyhiSoQyYWOTGS1YFA1ORSQopnRPbVgsYSv/SayaMwExTu0UvhhJ2l+wYfjLanxTe9N4HCF6ZWZLswtMKUounFvwzi8SGJFqu87SY5QooPc4GG2TYfXYi+FRQ8n2Kw8+FqmuJ6kB6XISDRaxl+039hNtwI7bCq30NHz6+y4pYQ1lr8zd61pnj+sRTo7M1gfm+14+uGCdIHxApVVrWw/tjsJFsl3/TfpZS+9rw8sB6DtjFrylys5Zf5grAXqm2uFyOb2o6JR+6a3ZZcQlFKe0aZBN+O1UYIqtLSiCtJsohJuWWu0JJMC5QtHGhFuO7e2Uem6RiCBgD0wT9XaVx/3QmS0Umc7WHZogj1WRCAngV1HtNOYOzxQORs+R3DzoCZqJ/cIuZpBwcC7mdn/Z67izYywVr1aYsP6R310Ljt7y3kgouVliLY4bpzjNMHyWcORSKj2Ne8Q6C8RImx5fglb8WupawK177NdjGVprFbZLE9K5FOC+Zl7SUKo25K7wCxHI0xPbX+fwtCwsOCYKfGBjP5mXxGePKX+xConuHumXqlYNyoWqaobiA7FULew5HNC+GO9U3NXISB5NvI5aSSoBFqM7DSXbA6EPj+A/oqQ1MCdiqHZyDxti3kR10OcPwkMwYsoArSKosUCsjNBT50Z7xL+qCG3emmPKAo7X8hMisVf9kk/hHCqZrwfzGiWe0dFupp9Y0smil3Adrw658Gl3FRtkKguBLwGubn1w1SU0V1QX2aHIzGQvN+ZeKQdBoiT3K0Vs7AsRpIKGhllYcbxQl5Qiyq35Iw4LXv1yrmRDCV7cYLSjjzWoGz6G0D/cKYWQkKwxOvYsC52LrJY3LBtc6AhCMDmfS1VPKuY6CmfZdOUkhg//OCwvW5pgaHCS3SwleWIOTbXYbHZGGe8si8lVJN5s5pueBvA8X1oUbHVFt8qmZSCWoe6HknEQHjK8+s3HZO1gD+QYieCp4H3NYmCD/v70depQXylIKQYFI8wJ65XXXkVfKOHGcnr8Nqf+553mcunq3JCy3jexKUT0wRxmvg9OFK9mon63BBhGaJB/Ca7Ik9pZ8E8vbYutsHu8CP80yr2sU6WnSkgVY4oQ7RukbGmvtd98U9dsI+BaKYjeRZr+jGjO41zO4NH+CLBzbgodXVwhQiEyO0Y0fT2k8h4cFdGo8/oIkn0FxSqPrMwncjv/8S6wZxM30L2vw+Y8pr0t7BPEO5xBi5VapQlUAbTGQ8mHEnIr1RePA5AgnTU7hFwxctvpkgONRx8VR+bfUUo0LBG8iX7/DlxTT/uYB2rCN5pmdzPjwB8MIpHCOegIckQbPjOsQGBg78/6TzUThAqU6wx5ANP3NzQcmPbDOe7PLsMIht8wZAA12PZfiXiVDHcKr+l2jDAmo5ngweLRoVv6b0q86H4HEmHXFL/ocMrSGaD9yxWR7yVPVqKii8Dk1ipMxf/d6TI5kKqWDrM0U+jLRALZSzreN3WtBYVm0Jx9sykQX3dUAvwwd1sNPLPPUj8X5CphMq33mRmyc/wulyOlA+aTxuf4QisbB4kPAj8hmNanHPS2xnmCT9y/gyNaiOqGZ5HOhyk65sCu2Wo4hP+lMsY/xEP/y7rbPhUhO7tEzDU9BL2ybVJ4iXUZxzuzv6GycCS+onmDIfsw==,iv:WlPRcFrhX2m83zFBqaUMgPq6oD9jV9oDooINrS2t6wQ=,tag:Sx2bwHJVEd5ht65RhEzUHg==,type:str]'
+  client-certificate-data: 'ENC[AES256_GCM,data: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,iv:aKpUZ31SujtTzOmQbgrakiTIdD3IUL50JDPupLC9PH0=,tag:tMtct9oGYz7TPsMQrVugzA==,type:str]'
+  client-key-data: 'ENC[AES256_GCM,data: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,iv:5dgC1jzwPr/gh3XIlMM8ac+LpsEDmOrKPkix5fvUYbg=,tag:sg293b4wqybLZcDaoA6IMw==,type:str]'
 isoImage:
   passwords:
-    deployer: 'ENC[AES256_GCM,data:f8HvwuwgSQZ+FxleRdE=,iv:w/nOspDYaQJYUrxDaatZqfwzJz/MtosLLOw3BAi5kps=,tag:7ZxUsFiUsX4r9nx6Rf5LCQ==,type:str]'
-    root: 'ENC[AES256_GCM,data:llk5QE87o2EwzNTEfOA=,iv:xAnpHVc2rv2Trex1YzCmh0VEKDC88X9pWdFoOfZeofs=,tag:/Z6/tjBZuZMd0xgn25qrlg==,type:str]'
+    deployer: 'ENC[AES256_GCM,data:WbJyKzVB60o2WSzibOI=,iv:4L57mHuFI0f5vUem71D2mywWMEJo4yEUlSOiYECRC/E=,tag:d4UgBGpBrOJVDkssILyh8g==,type:str]'
+    root: 'ENC[AES256_GCM,data:LTKY8OrcuVF3LO9mdNM=,iv:WokMob/fgGnqTAaQyK4wm9h9I494U1OF7w95K3p9VYM=,tag:82Rd99HC3eeeHGil7MOItQ==,type:str]'
 kind: VariableCatalogue
 metadata:
   labels:
     airshipit.org/deploy-k8s: 'false'
   name: generated-secrets
+sshKeys:
+  privateKey: 'ENC[AES256_GCM,data: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,iv:s+xvd+tcaIHn/DaF2aPZnxTpTYKoTBenMJJkS3RQmM0=,tag:j+3kvgOZpZbWvjyEsfPkog==,type:str]'
+  publicKey: 'ENC[AES256_GCM,data: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,iv:X+BcsxCk5DTp2dkrRbUq9Xip21MYPteaaXNNWks7fNM=,tag:b50SFBvLTimYnjOG/f+TjA==,type:str]'
 targetClusterCa:
-  tls.crt: 'ENC[AES256_GCM,data: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,iv:6j/U4n0YatBxXxf+gUi6EzXbJU45jc9KZkWOtN0QT60=,tag:iPR3lKvc2h7hpOr39zcI0A==,type:str]'
-  tls.key: 'ENC[AES256_GCM,data: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,iv:HFOdMUDdmYFat6lW7YDJeCvBSn4HlxEBHyBQ4pYi2cs=,tag:w/Mf8KeiAUjky7zcR0E2mA==,type:str]'
+  tls.crt: 'ENC[AES256_GCM,data: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,iv:kBNmXbIYFGWL3zneuljn5FuwYQbAbMK1mX7ZeBbTsxs=,tag:l0+AEZNplnz/qZF/hUkk6Q==,type:str]'
+  tls.key: 'ENC[AES256_GCM,data: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,iv:kZgG1Kdifzqv56+pWB80KLJNgOLzmcoBMpnQv6Hy8og=,tag:plInliFKBqejaK2DBSRV/w==,type:str]'
 targetKubeconfig:
-  certificate-authority-data: 'ENC[AES256_GCM,data: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,iv:03fiX+pQv3sINBBiMVG0jlszcRzBuik0+YLVs5WrQM8=,tag:/n/xc2EHUDbcOuAxZhPV1Q==,type:str]'
-  client-certificate-data: 'ENC[AES256_GCM,data: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,iv:XFuBTIQJT4ns6M00T3HWSGHdknjsRZ4cRZQXSsLiOkU=,tag:3flxFrWSyiuyiyxGkXTReQ==,type:str]'
-  client-key-data: 'ENC[AES256_GCM,data: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,iv:k5QGyZdIRwKnMuVqG1qzu4iyaLD1HxvryjV+m4H7N8E=,tag:GDCtPo3HUjHUQvpV7dBS1w==,type:str]'
+  certificate-authority-data: 'ENC[AES256_GCM,data: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,iv:sazLLy++BCMGu7jXEio65ttWqZMfs8r7ceJubOQWn8E=,tag:hizeflKtkMR6F5BNw0qOXA==,type:str]'
+  client-certificate-data: 'ENC[AES256_GCM,data:sxXqAVdhe76yzTCskbWzzN0nZye6v+6jYAb6YcCq82/ctW6DgopLogDuenIWkBLDhK7U/tvSQEB3zK0rBznh7EdXd/TWFF8WdV0HLJ1rRWq2ItCsJ8lltVyoCNLTino+13W9GFhp93QsznTz3ZWu4mnjzW+wUVtBQ7ir9DRae/rarotMbgNw5raSO0oiR6bUiZ5TEt7hXeh9SAbeBIJcQfvDEnIoQe2k9DQi7ttUZH5z9FoMeaSeNkl2atLejreDIvhVFecX/KD1jTJXehLO6Jxn0id/DOFz8bFZN5VCngHIVJhWir1g2oN7TaKeuo6fSKstw5QVPH5Z5IvF0lEJf4kw3qaVrCPEkKSnTM5bF4JNhhCdV+HqDUomEwjD5gWFYjzsG8s87CBgAQWi1ckX2BLMuvBu89LU/Vqqcyz9mXBWPj2qZO4EitX87c8QOWzOr3fiIVQMkzOLqg5gkJ9D1gwHOZ/3zNR3pNz1vFWP3+EBMttRoCS0EbG4dEepx/PLyyXUSBXn3HpbgnXpsTdLcAb286Oi+QUP40RwlVtRW91LGsYgq76Pmm0mop7JVLftZJeWrz9fwEAxk2CdwvneXmtOksWK7Q9lLQIxiaqpUWFiCbSepcv5eFuSh8QLhKooD1iGSH/B9YGCkan5OvcWzKgCdJY+C99IEWFWpgWkhpgFLow0YchdFXDvl+NH+6m2GCEO3ItV+9R3wl4Y1cgS7/gx+KzOWbKblfAHAPU6yTdl0VttNvwWvSb8fpRUlTqB9jBltVGHiVKqvF3gNY0tI5ZRRymwxMhWUVD2DHhn0VfuSP/HkIIMSZ6vZ1vRnLoCzkM9r53KhIMUQf2S3DJC+bRBDlrIJRiB/yU/Ex4GGCU1prXSE2CONkh53znAQghozVaU6daTHF14tBAToC57pfcdCcsTXu2NHgaLleZN0DTAM0DgDcZvWGGmVnkLT5by0NawRHEtJpy2jIFBFKKWQZ/XVi2a3AlJ93kYzwSDBTCOtlg7cnFvMdgjGmwDAVAxvmC2/9jvDxSXaXnAHF8brGkGpMDrF1M/NcTuS7TO0H6i0T/GKXaBcvcZccrb6XlKugyvswG25/0AWZtg0v+0S4iXHpZN1dY+rI2W54DHysTP6yl7aR8pNrvonFI9wdj3Q6tIR12JNB7/zuBsNz1N+PDEuw96PNHJl6L1EdVnqOkpVwPYI+daP+1g6WRklKx81699RL97fiQoNJS+mz6nsZY0qw2aMSF48KmhzfxDd0/+MSMuXLctW9Y3iTibyy1ZXSaQq1R8HspveBMHL03aZoAh3wwuy9eq7udwHV1fmAE0Xljg1Bp2jLk7V6kcFuPL7nYQZXh+FXrG+mm8RB7vOlj+9XAILeoO5O952KP50bRd4g2bQhy2JNLnv0jo4FGOXZaku2XWVhbdS79mcbp31IPuCgzmaUYoDRMimktFjzmhPp2qLrfBy1iSoj+kknnyKh/2dUU1VPpPfooqtWKgn0qVZBf3R368P6NvRdrBDf6coWwYVGCWh7I2Ms8XypfOPdgnD0pvJd3Hv+Bph2A3qIx6LCoUQpxJlOzV7Ta0dP94Gi5MkFOWfkRzTIjADqTbmJgif1LJL6BSHqestLwn12BP6uN6jxV3qJf7sI/Y+zshvsg7fGEWAiLP83vv5opvWQUih9Q29wYePXS5pPc9tyHvDZTb+PL3fE4Dyf0hDiYU8Fqk3V9KToPrVpxnaggP7mEVHQwccsFLtdmkZNQ2MUdaDj3/2SgJZBuekFD4MYN5vyNJQrDKyVy4ATXayC2I6H3rX/m/DE14SZeoDRzEiL/AwhDoph0rtyHKjRwvIE3FiWMgtbP9eJ7HzCf6L+Ezzt50SfViefkjuZmgeKXuqdKiLC6Hspkxzj0QRCIOnCWpdrGZo1xK2rkRX575qMECUiaYYyBx7PTsSFp91E+2PjfSGVmb57nzXDncJpP8VX3n7xPpnWXrj00XemuGuFjEwtQ0JA==,iv:djcjpXThSxl5zYn0gIMLrQ04Hkpp1hzirZCu1sjLCRQ=,tag:KL0JD5DSSGSB8ORS2jview==,type:str]'
+  client-key-data: 'ENC[AES256_GCM,data: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,iv:DmFLOpXPuKYnU3vM71o3m5X3ewwVmgYpGtvXmDAnTxo=,tag:q9hSqV+X6MP6f6q/ihuVXw==,type:str]'
 sops:
   kms: []
   gcp_kms: []
   azure_kv: []
   hc_vault: []
-  lastmodified: '2021-02-04T01:31:55Z'
-  mac: 'ENC[AES256_GCM,data:2WFdA51KkN7/cM90p61XTPUjykAXqTYuM1mrGbh91GxRLVL0fBNGljCb5PCPY/Ir3xnP7VFQN6LtBwmLFdj+7spj4Y40srQBU4A2e8j9GzuhW14jtvy2de+2v2wG2BZVllyaWKbu4+Mzav17eK9mscawPUCefed8InxXiF3yV1c=,iv:XbAJ3aHV3kgo6MLGTYkBzWIGp199l1B5siXMiFBXlUs=,tag:Q/cz3bQ87/TwAAsikORuNQ==,type:str]'
+  lastmodified: '2021-05-07T16:56:58Z'
+  mac: 'ENC[AES256_GCM,data:Jaxbj5ovji1Gz9Wiay8H76JN9at7WCjkJACy3tBDJo1/C7gIMof9/ocRgDYitUuqwwLbJ4kTIK03rVGjhhI2dtVSbIlq9JdI5uzTpVXolgxa0m7DIHCRLq5t7OLHDyDtZkSH93yus+ZZUKHV7mus3buH2IG4v30k1K19Kb99YWg=,iv:k3myPh6JyJNOmZocs3DIZ/CBkp3xP68vEd5OjCcENBU=,tag:G8twO3G98Sfn4jV6oGDSPg==,type:str]'
   pgp:
-  - created_at: '2021-02-04T01:31:55Z'
+  - created_at: '2021-05-07T16:56:58Z'
     enc: |
       -----BEGIN PGP MESSAGE-----
 
-      hQEMAyUpShfNkFB/AQf8CFwdvykoBIMfsOO9bSuz8Cx+IFhJGwPPEsSId+q/EFdz
-      tCop9SpR86AB+4T+MtC46uH1+gcV3Ko/dlXP++49BQ0zWpzgfDxsnnuudZyNX19D
-      SFmlEHKBniKavLR7P3Qg8GJMpREVkjQTRgSnZdwttWXCmFGtnuhBKajautlqK7Am
-      4J7iLGIiY1ynmig8JCJZ79CaSbyh8+/jmvjrx/17mR59HYUizH0P7FbPwAwDpoy1
-      lFh//AJKJ65Y51ar/hYC+ljdgE91UNiF3zsSETI+Lp0r5y7XG/tKeV+tqQGUdhvn
-      L9m9eqrvAw05TD/o2DKZSoSeRKLcMlqNwxYko9YO9NJeAfc3RbCWltgTii49+srf
-      mwyCuz/BQwz5rRY6VP+QLYkDGmzEjekrJGqWZQP/BU44TihL06mv/mxY3xConG24
-      Fy5Mi9UmNwsJMWBIlPEREantjbVnboiS0Q0DN0OAIw==
-      =+R0I
+      hQEMAyUpShfNkFB/AQf/aNIpyl8ECRHFxl2StbisRMSHDApmE7+tLjm/eKbLV86M
+      3+i3RybN6ZK4fbSSfBdcaNz08OT3EqVkJe/AH0SLrx7LEIxjKlPbJS6oqXGPT6+Q
+      AwMDmsPOELS9e5qF82f7vVmc6Irm2AY56B4JQB49+wz6tZElAoKA37FCPLolYKGM
+      TpFyJxeiyLeUu1/rXbhFToATbxNJ0/dzz8Z+dTxqokvHlw3ANsLIv1V9TA5+iAW6
+      dIGDq2rW3TZEanriH+i0Lvw9gtig0+eDLasoz6ScaoPGY8gOLuq0oI8SNVILiXla
+      VFxZ6xWBlFTNQo1w/HhPuEYtGqMP1rdVxRDPnKz9ENJeAXRaYcTBjs5ux2hLOiFL
+      EL3oJmDSYjwtVENnEjQqgO0HcCLOuqbnqAEu7OSSE7DigpBi+7n1Y1cKtKSqNV1t
+      PgzGiwH9Z9Za/fSj28EtmOK97u5uiXUkjSeMxJ0YPw==
+      =GHTy
       -----END PGP MESSAGE-----
     fp: FBC7B9E2A4F9289AC0C1D4843D16CEE4A27381B4
   unencrypted_regex: ^(kind|apiVersion|group|metadata)$

manifests/type/airship-core/ephemeral/controlplane/dex-apiserver/README.md

@@ -1,10 +1,67 @@
 # DEX-APIServer kustomizations
 
 The "dex-apiserver" folder provides the manifests and patches to configure the API server with
-"oidc" flags.
+"oidc" flags and CA certificate (Secret). Refer to the JSON patch file *oidc-apiserver-flags.json*.
+This patch file adds OIDC flags configuration to the API server in the KubeadmControlPlane CR,
+which is used to create the Target cluster's ControlPlane node and deploy the API server during
+the execution of ***airshipctl phase run controlplane-ephemeral*** command.
 
-In order to ensure synchronization with the "dex-aio" service, you MUST ensure that values
-assigned to the API server "oidc" flags are the same used for the "dex-aio" service.
+>IMPORTANT: The JSON patch is tailored for baremetal provider. If deploying target cluster on a
+>different provider (e.g., Azure, GCP, Openstack), you will need to update this patch, accordingly.
 
-TODO: a shared catalogue shall provide the values shared between "dex-aio" service and
-the cluster's API server "oidc" flags.
+In order to ensure synchronization with the "dex-aio" service, the CA certificate (Secret)
+in the Ephemeral cluster SHALL be copied to the Target cluster. This is achieved by adding the label
+**clusterctl.cluster.x-k8s.io/move: "true"** to the CA Secret. This label idenfies this Secret as
+candidate to the CAPI move command executed by ***airshipctl phase run clusterctl-move*** command.
+
+Once this CA Secret has been moved to the Target cluster, it will be used during **dex-aio** deployment
+to sign Certificates to be used by Dex.
+
+>NOTES on **oidc-apiserver-flags.json**:
+* The (Dex) FQDN for the attribute **oidc-issuer-url** will have to be added to the list under **certSANs**
+* The patches for **"/spec/kubeadmConfigSpec/preKubeadmCommands/-"** are needed if your (Dex) FQDN cannot be resolved by the DNS used by the controlplane node.
+* The **oidc-issuer-url** FQDN and port number MUST match **dex-aio** HelmRelease values for **values.params.endpoints.hostname** and **values.params.endpoints.port.https**. Example below:
+
+Snippet of **oidc-apiserver-flags.json**
+```json
+  {
+    "op": "add",
+    "path": "/spec/kubeadmConfigSpec/clusterConfiguration/apiServer",
+    "value": {
+      "extraArgs":
+      {
+        "oidc-issuer-url": "https://dex.function.local:32556/dex",
+      },
+```
+
+Snippet of **treasuremap/manifests/function/dex-aio/dex-helmrelease.yaml**
+```yaml
+  values:
+    params:
+      endpoints:
+        hostname: dex.function.local
+        port:
+          https: 32556
+```
+
+Also, in case your **dex-aio** FQDN (e.g., **dex.function.local**) cannot be resolved by the DNS configured
+in the control plane node, your JSON patch will also have to include this FQDN to the nodes **/etc/hosts**
+so that the API server can reach **dex-aio** microservice.
+
+Snippet of **oidc-apiserver-flags.json**
+```json
+  {
+    "op": "add",
+    "path": "/spec/kubeadmConfigSpec/preKubeadmCommands/-",
+    "value": "echo '10.23.25.102 dex.function.local' | tee -a /etc/hosts"
+  }
+```
+
+>NOTES on **dex-ca-cert-secret.yaml**:
+* This Secret contains a Certificate Authority (CA) certificate manually generated.
+* The CA certificate was not signed by a known authority
+
+>TODO(s):
+* CA certificate shall be auto generated
+* The CA certificate shall be signed by a known authority
+* The generated CA certificate shall be secured, e.g., encrypted using SOPS

manifests/type/airship-core/ephemeral/controlplane/dex-apiserver/apiserver-certs-secret.yaml

@@ -1,7 +0,0 @@
----
-apiVersion: v1
-kind: Secret
-metadata:
-  name: dex-apiserver-secret
-data:
-  tls.crt: dGVtcG9yYWx5IGR1bW15IHRscy5jcnQgZGF0YSBmb3IgdGVzdCBwdXJwb3NlCg==

manifests/type/airship-core/ephemeral/controlplane/dex-apiserver/dex-ca-cert-secret.yaml

@@ -0,0 +1,12 @@
+# Certificate Authority to be used to generate certificates for Dex
+# By cert-manager in the Target-cluster. Also this CA will be used by API server
+apiVersion: v1
+kind: Secret
+metadata:
+  name: dex-apiserver-secret
+  labels:
+    clusterctl.cluster.x-k8s.io/move: "true"
+type: kubernetes.io/tls
+data:
+  tls.crt: "target-cluster-ca certificate will be copied by replacement transformer"
+  tls.key: "target-cluster-ca certificate key will be copied by replacement transformer"

manifests/type/airship-core/ephemeral/controlplane/dex-apiserver/oidc-apiserver-flags.json

@@ -7,10 +7,9 @@
       {
         "oidc-ca-file": "/etc/kubernetes/certs/dex-cert",
         "oidc-client-id": "function-kubernetes",
-        "oidc-groups-claim": "groups",
-        "oidc-issuer-url": "https://dex.function.local:30556/dex",
-        "oidc-username-claim": "email",
-        "oidc-username-prefix": "oidc:"
+        "oidc-groups-claim": "group",
+        "oidc-issuer-url": "https://dex.function.local:32556/dex",
+        "oidc-username-claim": "email"
       },
       "extraVolumes":
       [
@@ -20,6 +19,11 @@
           "name": "dex-cert",
           "readOnly": true
         }
+      ],
+      "certSANs":
+      [
+        "dex.function.local",
+        "dex.baremetal.local"
       ]
     }
   },
@@ -37,5 +41,15 @@
       "path": "/etc/kubernetes/certs/dex-cert",
       "permissions": "0644"
     }
+  },
+  {
+    "op": "add",
+    "path": "/spec/kubeadmConfigSpec/preKubeadmCommands/-",
+    "value": "echo '10.23.25.102 dex.baremetal.local' | tee -a /etc/hosts"
+  },
+  {
+    "op": "add",
+    "path": "/spec/kubeadmConfigSpec/preKubeadmCommands/-",
+    "value": "echo '10.23.25.102 dex.function.local' | tee -a /etc/hosts"
   }
 ]

manifests/type/airship-core/ephemeral/controlplane/kustomization.yaml

@@ -2,12 +2,12 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
   - ../../../../function/k8scontrol-ha
-#   - dex-apiserver/apiserver-certs-secret.yaml
+  - dex-apiserver/dex-ca-cert-secret.yaml
 
-# patchesJson6902:
-# - target:
-#     group: controlplane.cluster.x-k8s.io
-#     version: v1alpha3
-#     kind: KubeadmControlPlane
-#     name: cluster-controlplane
-#   path: dex-apiserver/oidc-apiserver-flags.json
+patchesJson6902:
+  - target:
+      group: controlplane.cluster.x-k8s.io
+      version: v1alpha3
+      kind: KubeadmControlPlane
+      name: "cluster-controlplane"
+    path: dex-apiserver/oidc-apiserver-flags.json

manifests/type/airship-core/ephemeral/controlplane/replacements/kustomization.yaml

@@ -3,3 +3,4 @@ kind: Kustomization
 resources:
   - ../../../../../function/k8scontrol-ha/replacements
   - ../../../../../../../airshipctl/manifests/function/k8scontrol/replacements
+  - update-dex.yaml

manifests/type/airship-core/ephemeral/controlplane/replacements/update-dex.yaml

@@ -0,0 +1,19 @@
+apiVersion: airshipit.org/v1alpha1
+kind: ReplacementTransformer
+metadata:
+  name: k8scontrol-cluster-dex-replacements
+  annotations:
+    config.kubernetes.io/function: |-
+      container:
+        image: quay.io/airshipit/replacement-transformer:v2.0.2
+replacements:
+- source:
+    objref:
+      kind: VariableCatalogue
+      name: generated-secrets
+    fieldref: "{.targetClusterCa}"
+  target:
+    objref:
+      kind: Secret
+      name: dex-apiserver-secret
+    fieldrefs: ["{.data}"]