httpd_configmap_generator 0.1.1 → 0.3.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (35) hide show
  1. checksums.yaml +5 -5
  2. data/.gitignore +1 -0
  3. data/.travis.yml +3 -2
  4. data/.yamllint +11 -0
  5. data/Dockerfile +3 -2
  6. data/Gemfile +4 -0
  7. data/README-active-directory.md +11 -15
  8. data/README-ipa.md +7 -12
  9. data/README-ldap.md +62 -0
  10. data/README-oidc.md +39 -0
  11. data/README-saml.md +9 -14
  12. data/README.md +37 -49
  13. data/bin/httpd_configmap_generator +36 -50
  14. data/httpd_configmap_generator.gemspec +5 -3
  15. data/lib/httpd_configmap_generator.rb +2 -0
  16. data/lib/httpd_configmap_generator/active_directory.rb +2 -2
  17. data/lib/httpd_configmap_generator/base.rb +10 -6
  18. data/lib/httpd_configmap_generator/base/command.rb +19 -17
  19. data/lib/httpd_configmap_generator/base/config_helper.rb +15 -0
  20. data/lib/httpd_configmap_generator/base/config_map.rb +43 -26
  21. data/lib/httpd_configmap_generator/base/file_helper.rb +67 -0
  22. data/lib/httpd_configmap_generator/base/kerberos.rb +10 -8
  23. data/lib/httpd_configmap_generator/base/network.rb +27 -25
  24. data/lib/httpd_configmap_generator/base/pam.rb +6 -4
  25. data/lib/httpd_configmap_generator/base/sssd.rb +1 -1
  26. data/lib/httpd_configmap_generator/ipa.rb +12 -1
  27. data/lib/httpd_configmap_generator/ldap.rb +186 -0
  28. data/lib/httpd_configmap_generator/oidc.rb +48 -0
  29. data/lib/httpd_configmap_generator/saml.rb +16 -14
  30. data/lib/httpd_configmap_generator/version.rb +1 -1
  31. data/templates/httpd-scc-sysadmin.yaml +38 -0
  32. metadata +18 -14
  33. data/lib/httpd_configmap_generator/base/config.rb +0 -13
  34. data/lib/httpd_configmap_generator/base/file.rb +0 -65
  35. data/lib/httpd_configmap_generator/options.rb +0 -13
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
- SHA1:
3
- metadata.gz: 269f3519101488e9580699f67f1fa479f1db78f6
4
- data.tar.gz: 3224b233aedc0c5ae68cb0299d2438e165b2b7f5
2
+ SHA256:
3
+ metadata.gz: aff6b3f7af181564f46a046634efe1965f4ed7936db37d143afa8d5ad0e59890
4
+ data.tar.gz: ebd0cfa723b123acd3cc8beac4b30e8349991c0563a93289cacd71440798a644
5
5
  SHA512:
6
- metadata.gz: a0d1935e46028b58c93d019e38b1133d2653414ae77d4bc0e33182a7d1d1230c43bdf12dd5cccd233c381bf6aa8c9fe3a632c37bd220dd3a2ec8cc820b3d1301
7
- data.tar.gz: 7d85650f7f2b59dc7db1345e48e0486687fea752482232d3d1cccbde9b20e273b455003cbc45eaadff9bbd62a58b11d243abed5f23debcd57374b35da60f987e
6
+ metadata.gz: 430913f53ac70692b10393aaaad7c94619a6a7b674871e84286a88020f86ee1bdd2fbfe8e87fa74a031402a07e7d5c6ca6dffe18de51c4465039ebc35ddde2ac
7
+ data.tar.gz: 149a5aa5978a38e573d112a0138f7574a09b1427b225aaf79d528b039e9ea7a11a5a0a6e392917e9d4c4baa01f5a5603e81d71ae08eba95950426e70d7d71ba7
data/.gitignore CHANGED
@@ -1,3 +1,4 @@
1
+ Dockerfile.devel
1
2
  .rubocop-*
2
3
  /bundle/
3
4
  /.bundle/
data/.travis.yml CHANGED
@@ -1,7 +1,8 @@
1
+ ---
1
2
  language: ruby
2
3
  rvm:
3
- - '2.3.5'
4
- - '2.4.2'
4
+ - 2.5.7
5
+ - 2.6.5
5
6
  sudo: false
6
7
  cache: bundler
7
8
  after_script: bundle exec codeclimate-test-reporter
data/.yamllint ADDED
@@ -0,0 +1,11 @@
1
+ ---
2
+ ignore: |
3
+ /vendor/**
4
+
5
+ extends: relaxed
6
+
7
+ rules:
8
+ indentation:
9
+ indent-sequences: false
10
+ line-length:
11
+ max: 120
data/Dockerfile CHANGED
@@ -1,4 +1,4 @@
1
- FROM manageiq/httpd:latest
1
+ FROM manageiq/httpd-init:latest
2
2
  MAINTAINER ManageIQ https://github.com/ManageIQ
3
3
 
4
4
  LABEL name="httpd-configmap-generator" \
@@ -11,6 +11,7 @@ ENV HTTPD_AUTH_TYPE=internal \
11
11
  HTTPD_AUTH_KERBEROS_REALMS=undefined \
12
12
  TERM=xterm
13
13
 
14
- RUN yum -y install openldap-clients pamtester
14
+ RUN dnf -y --disableplugin=subscription-manager install https://dl.fedoraproject.org/pub/epel/epel-release-latest-8.noarch.rpm && \
15
+ dnf -y --disableplugin=subscription-manager install openldap-clients pamtester
15
16
 
16
17
  RUN gem install --no-ri --no-rdoc --no-document httpd_configmap_generator
data/Gemfile CHANGED
@@ -2,3 +2,7 @@ source "https://rubygems.org"
2
2
 
3
3
  # Leverage the httpd_configmap_generator.gemspec
4
4
  gemspec
5
+
6
+ # Load other additional Gemfiles
7
+ # Developers can create a file ending in .rb under bundler.d/ to specify additional development dependencies
8
+ Dir.glob(File.join(__dir__, 'bundler.d/*.rb')).each { |f| eval_gemfile(File.expand_path(f, __dir__)) }
data/README-active-directory.md CHANGED
@@ -8,21 +8,17 @@ by joining an Active Directory domain.
8
8
 
9
9
  ```
10
10
  $ httpd_configmap_generator active-directory --help
11
- httpd_configmap_generator 0.1.0 - External Authentication Configuration script
12
-
13
- Usage: httpd_configmap_generator auth_type | update | export [--help | options]
14
-
15
- httpd_configmap_generator options are:
16
- -V, --version Version of the httpd_configmap_generator command
17
- -h, --host=<s> Application Domain (default: )
18
- -o, --output=<s> Configuration map file to create (default: )
19
- -a, --ad-domain=<s> Active Directory Domain (default: )
20
- -u, --ad-server=<s> Active Directory User (default: )
21
- -p, --ad-password=<s> Active Directory Password (default: )
22
- -f, --force Force configuration if configured already
23
- -d, --debug Enable debugging
24
- -r, --ad-realm=<s> Active Directory Realm (default: )
25
- -e, --help Show this message
11
+ Options:
12
+ -h, --host=<s> Application Domain
13
+ -o, --output=<s> Configuration map file to create
14
+ -a, --ad-domain=<s> Active Directory Domain
15
+ -u, --ad-user=<s> Active Directory User
16
+ -p, --ad-password=<s> Active Directory Password
17
+ -f, --force Force configuration if configured already
18
+ -d, --debug Enable debugging
19
+ -r, --ad-realm=<s> Active Directory Realm
20
+ -s, --ad-server=<s> Active Directory Server
21
+ -e, --help Show this message
26
22
  ```
27
23
 
28
24
  ### Example:
data/README-ipa.md CHANGED
@@ -8,21 +8,16 @@ for an IPA server.
8
8
 
9
9
  ```
10
10
  $ httpd_configmap_generator ipa --help
11
- httpd_configmap_generator 0.1.0 - External Authentication Configuration script
12
-
13
- Usage: httpd_configmap_generator auth_type | update | export [--help | options]
14
-
15
- httpd_configmap_generator options are:
16
- -V, --version Version of the httpd_configmap_generator command
17
- -h, --host=<s> Application Domain (default: )
18
- -o, --output=<s> Configuration map file to create (default: )
19
- -i, --ipa-server=<s> IPA Server Fqdn (default: )
20
- -p, --ipa-password=<s> IPA Server Password (default: )
11
+ Options:
12
+ -h, --host=<s> Application Domain
13
+ -o, --output=<s> Configuration map file to create
14
+ -i, --ipa-server=<s> IPA Server FQDN
15
+ -p, --ipa-password=<s> IPA Server Password
21
16
  -f, --force Force configuration if configured already
22
17
  -d, --debug Enable debugging
23
18
  -a, --ipa-principal=<s> IPA Server Principal (default: admin)
24
- -m, --ipa-domain=<s> Domain of IPA Server (default: )
25
- -r, --ipa-realm=<s> Realm of IPA Server (default: )
19
+ -m, --ipa-domain=<s> Domain of IPA Server
20
+ -r, --ipa-realm=<s> Realm of IPA Server
26
21
  -e, --help Show this message
27
22
  ```
28
23
 
data/README-ldap.md ADDED
@@ -0,0 +1,62 @@
1
+ # Httpd Configmap Generator - LDAP
2
+
3
+ This documents how to run the httpd\_configmap\_generator tool to configure external authentication
4
+ for an LDAP server.
5
+
6
+
7
+ ## Usage for the `ldap` auth-type:
8
+
9
+ ```
10
+ $ httpd_configmap_generator ldap --help
11
+ Options:
12
+ -h, --host=<s> Application Domain
13
+ -o, --output=<s> Configuration map file to create
14
+ -c, --cert-file=<s> Cert File
15
+ -l, --ldap-host=<s> LDAP Directory Host FQDN
16
+ -a, --ldap-mode=<s> ldap | ldaps
17
+ -p, --ldap-basedn=<s> LDAP Directory Base DN
18
+ -f, --force Force configuration if configured already
19
+ -d, --debug Enable debugging
20
+ -g, --ldap-group-name=<s> LDAP Directory Group Name (default: cn)
21
+ -r, --ldap-group-member=<s> Attribute containing the names of the
22
+ group's members (default: member)
23
+ -u, --ldap-group-object-class=<s> The object class of a group entry in
24
+ LDAP (default: groupOfNames)
25
+ -i, --ldap-id-use-start-tls,
26
+ --no-ldap-id-use-start-tls Connection use tls? (default: true)
27
+ -t, --ldap-port=<s> LDAP Directory Port
28
+ -s, --ldap-tls-reqcert=<s> The checks to perform on server
29
+ certificates. (Default: allow)
30
+ -e, --ldap-user-gid-number=<s> LDAP attribute corresponding to the
31
+ user's gid (default: gidNumber)
32
+ -n, --ldap-user-name=<s> LDAP Directory User Name (default: cn)
33
+ -b, --ldap-user-object-class=<s> Object class of a user entry in LDAP
34
+ (default: posixAccount)
35
+ -m, --ldap-user-uid-number=<s> LDAP attribute corresponding to the
36
+ user's id (default: uidNumber)
37
+ --ldap-user-search-base=<s> The user DN search scope
38
+ --ldap-group-search-base=<s> The group DN search scope
39
+ -x, --support-non-posix Supports non-posix user records
40
+ --help Shows this message
41
+ ```
42
+
43
+ ### Example:
44
+
45
+ ```
46
+ $ httpd_configmap_generator ldap \
47
+ --force \
48
+ --host=application.example.com \
49
+ --ldap-mode=ldap \
50
+ --ldap-host=ldap-server.example.com \
51
+ --ldap-port=10389 \
52
+ --ldap-basedn=dc=example,dc=com \
53
+ --ldap-group-name=cn \
54
+ --ldap-group-search-base=ou=groups,dc=example,dc=com \
55
+ --ldap-group-object-class=groupOfNames \
56
+ --ldap-user-name=uid \
57
+ --ldap-user-search-base=ou=users,dc=example,dc=com \
58
+ --ldap-user-object-class=person \
59
+ --cert-file=/etc/openldap/cacerts/apacheds-cert.pem \
60
+ --debug \
61
+ -o /tmp/external-ldap.yaml
62
+ ```
data/README-oidc.md ADDED
@@ -0,0 +1,39 @@
1
+ # Httpd Configmap Generator - OpenID-Connect (OIDC)
2
+
3
+ This documents how to run the httpd\_configmap\_generator tool to configure the container against an OpenID-Connect (OIDC) identity provider.
4
+
5
+ ## Usage for the `oidc` auth-type:
6
+
7
+ ```
8
+ $ httpd_configmap_generator oidc --help
9
+ Options:
10
+ -o, --output=<s> Configuration map file to create
11
+ -u, --oidc-url=<s> OpenID-Connect Provider URL
12
+ -i, --oidc-client-id=<s> OpenID-Connect Provider Client ID
13
+ -s, --oidc-client-secret=<s> OpenID-Connect Provider Client Secret
14
+ -f, --force Force configuration if configured already
15
+ -d, --debug Enable debugging
16
+ -h, --help Show this message
17
+
18
+ ```
19
+
20
+ ### Examples:
21
+
22
+ Creates the extra data for the container:
23
+
24
+ ```
25
+ $ httpd_configmap_generator oidc \
26
+ --force \
27
+ --oidc-url=http://my-keycloak:8080/auth/realms/miq/.well-known/openid-configuration \
28
+ --oidc-client-id=my-keycloak-oidc-client \
29
+ --oidc-client-secret=99999999-9999-9999-a999-99999a999999 \
30
+ --debug \
31
+ -o /tmp/external-oidc.yaml
32
+ ```
33
+
34
+ The auth configmap file for oidc does not include any files. It only includes the following extra data:
35
+
36
+ * auth-oidc-provider-metadata-url
37
+ * auth-oidc-client-id
38
+ * auth-oidc-client-secret
39
+
data/README-saml.md CHANGED
@@ -6,19 +6,14 @@ This documents how to run the httpd\_configmap\_generator tool to configure the
6
6
 
7
7
  ```
8
8
  $ httpd_configmap_generator saml --help
9
- httpd_configmap_generator 0.1.0 - External Authentication Configuration script
10
-
11
- Usage: httpd_configmap_generator auth_type | update | export [--help | options]
12
-
13
- httpd_configmap_generator options are:
14
- -V, --version Version of the httpd_configmap_generator command
15
- -h, --host=<s> Application Domain (default: )
16
- -o, --output=<s> Configuration map file to create (default: )
9
+ Options:
10
+ -h, --host=<s> Application Domain
11
+ -o, --output=<s> Configuration map file to create
17
12
  -f, --force Force configuration if configured already
18
13
  -d, --debug Enable debugging
19
14
  -k, --keycloak-add-metadata Download and add the Keycloak metadata file
20
- -e, --keycloak-server=<s> Keycloak Server Fqdn or IP (default: )
21
- -y, --keycloak-realm=<s> Keycloak Realm for this client (default: )
15
+ -e, --keycloak-server=<s> Keycloak Server FQDN or IP
16
+ -y, --keycloak-realm=<s> Keycloak Realm for this client
22
17
  -l, --help Show this message
23
18
  ```
24
19
 
@@ -61,10 +56,10 @@ $ httpd_configmap_generator saml \
61
56
  In the above example, the auth configmap file would include the following files:
62
57
 
63
58
  * /etc/httpd/saml2/
64
- - miqsp-metadata.xml
65
- - miqsp-cert.cert
66
- - miqsp-key.key
59
+ - sp-metadata.xml
60
+ - sp-cert.cert
61
+ - sp-key.key
67
62
  - idp-metadata.xml
68
63
 
69
- For Keycloak, the `miqsp-metadata.xml` file can be imported to create the Client ID for
64
+ For Keycloak, the `sp-metadata.xml` file can be imported to create the Client ID for
70
65
  the `application.example.com` application domain.
data/README.md CHANGED
@@ -1,7 +1,7 @@
1
1
  # Httpd Configmap Generator
2
2
 
3
3
  [![Gem Version](https://badge.fury.io/rb/httpd_configmap_generator.svg)](http://badge.fury.io/rb/httpd_configmap_generator)
4
- [![Build Status](https://travis-ci.org/ManageIQ/httpd_configmap_generator.svg)](https://travis-ci.org/ManageIQ/httpd_configmap_generator)
4
+ [![Build Status](https://travis-ci.org/ManageIQ/httpd_configmap_generator.svg?branch=master)](https://travis-ci.org/ManageIQ/httpd_configmap_generator)
5
5
  [![Code Climate](https://codeclimate.com/github/ManageIQ/httpd_configmap_generator.svg)](https://codeclimate.com/github/ManageIQ/httpd_configmap_generator)
6
6
  [![Test Coverage](https://codeclimate.com/github/ManageIQ/httpd_configmap_generator/badges/coverage.svg)](https://codeclimate.com/github/ManageIQ/httpd_configmap_generator/coverage)
7
7
  [![Dependency Status](https://gemnasium.com/ManageIQ/httpd_configmap_generator.svg)](https://gemnasium.com/ManageIQ/httpd_configmap_generator)
@@ -23,10 +23,16 @@ gem install httpd_configmap_generator
23
23
  Generating an auth-config map can be done by running the httpd\_configmap\_generator tool
24
24
 
25
25
  ```
26
- $ httpd_configmap_generator
26
+ $ httpd_configmap_generator --help
27
+ httpd_configmap_generator 0.1.1 - External Authentication Configuration script
27
28
 
28
29
  Usage: httpd_configmap_generator auth_type | update | export [--help | options]
29
- Supported auth_type: active-directory, ipa, saml
30
+
31
+ supported auth_type: active-directory, ipa, ldap, saml, oidc
32
+
33
+ httpd_configmap_generator options are:
34
+ -V, --version Version of the httpd_configmap_generator command
35
+ -h, --help Show this message
30
36
  ```
31
37
 
32
38
  Showing the usage for each authentication type or sub-command as follows:
@@ -37,11 +43,13 @@ $ httpd_configmap_generator ipa --help
37
43
 
38
44
  ## Supported Authentication Types
39
45
 
40
- |auth-type | Identity Provider/Environment | for usage: |
41
- |------------------|------------------------------------------------|------------|
42
- | active-directory | Active Directory domain realm join | [README-active-directory](README-active-directory.md) |
43
- | ipa | IPA, IPA 2-factor authentication, IPA/AD Trust | [README-ipa](README-ipa.md) |
44
- | saml | Keycloak, etc. | [README-saml](README-saml.md) |
46
+ |auth-type | Identity Provider/Environment | for usage: |
47
+ |-----------------------------------|--------------------------------------------------|-------------------------------------------------------|
48
+ | active-directory | Active Directory domain realm join | [README-active-directory](README-active-directory.md) |
49
+ | ipa | IPA, IPA 2-factor authentication, IPA/AD Trust | [README-ipa](README-ipa.md) |
50
+ | ldap | Ldap directories | [README-ldap](README-ldap.md) |
51
+ | saml | Keycloak, etc. | [README-saml](README-saml.md) |
52
+ | OpenID-Connect (oidc) | Keycloak, etc. | [README-oidc](README-oidc.md) |
45
53
 
46
54
  ___
47
55
 
@@ -53,17 +61,12 @@ map as per the following usage:
53
61
 
54
62
  ```
55
63
  $ httpd_configmap_generator update --help
56
- httpd_configmap_generator 0.1.0 - External Authentication Configuration script
57
-
58
- Usage: httpd_configmap_generator auth_type | update | export [--help | options]
59
-
60
- httpd_configmap_generator options are:
61
- -V, --version Version of the httpd_configmap_generator command
62
- -i, --input=<s> Input config map file (default: )
63
- -o, --output=<s> Output config map file (default: )
64
+ Options:
65
+ -i, --input=<s> Input config map file
66
+ -o, --output=<s> Output config map file
64
67
  -f, --force Force configuration if configured already
65
68
  -d, --debug Enable debugging
66
- -a, --add-file=<s> Add file to config map (default: )
69
+ -a, --add-file=<s> Add file to config map
67
70
  -h, --help Show this message
68
71
  ```
69
72
 
@@ -127,7 +130,7 @@ $ httpd_configmap_generator update \
127
130
  ```
128
131
  $ httpd_configmap_generator update \
129
132
  --input=/tmp/original-auth-configmap.yaml \
130
- --add-file=http://aab-keycloak:8080/auth/realms/miq/protocol/saml/description,/etc/httpd/saml2/idp-metadata.xml,644:root:root \
133
+ --add-file=http://aab-keycloak:8080/auth/realms/testrealm/protocol/saml/description,/etc/httpd/saml2/idp-metadata.xml,644:root:root \
131
134
  --output=/tmp/updated-auth-configmap.yaml
132
135
  ```
133
136
 
@@ -143,15 +146,10 @@ map as per the following usage:
143
146
 
144
147
  ```
145
148
  $ httpd_configmap_generator export --help
146
- httpd_configmap_generator 0.1.0 - External Authentication Configuration script
147
-
148
- Usage: httpd_configmap_generator auth_type | update | export [--help | options]
149
-
150
- httpd_configmap_generator options are:
151
- -V, --version Version of the httpd_configmap_generator command
152
- -i, --input=<s> Input config map file (default: )
153
- -l, --file=<s> Config map file to export (default: )
154
- -o, --output=<s> The output file being exported (default: )
149
+ Options:
150
+ -i, --input=<s> Input config map file
151
+ -l, --file=<s> Config map file to export
152
+ -o, --output=<s> The output file being exported
155
153
  -f, --force Force configuration if configured already
156
154
  -d, --debug Enable debugging
157
155
  -h, --help Show this message
@@ -218,7 +216,7 @@ Example for generating a configuration map for IPA:
218
216
 
219
217
  ```
220
218
  $ docker exec $CONFIGMAP_GENERATOR_ID httpd_configmap_generator ipa \
221
- --host=miq-appliance.example.com \
219
+ --host=appliance.example.com \
222
220
  --ipa-server=ipaserver.example.com \
223
221
  --ipa-domain=example.com \
224
222
  --ipa-realm=EXAMPLE.COM \
@@ -263,39 +261,29 @@ ___
263
261
 
264
262
  ### Pre-deployment tasks
265
263
 
266
- #### If running without OCI systemd hooks (Minishift)
267
-
268
- The httpd-configmap-generator service account must be added to the miq-sysadmin SCC before the Httpd Auth Config pod can run.
264
+ The httpd-configmap-generator service account must be added to the httpd-scc-sysadmin SCC before the Httpd Configmap Generator can run.
269
265
 
270
266
  ##### As Admin
271
267
 
272
- ```
273
- $ oc adm policy add-scc-to-user miq-sysadmin system:serviceaccount:<your-namespace>:httpd-configmap-generator
274
- ```
275
-
276
- Verify that the httpd-configmap-generator service account is now included in the miq-sysadmin SCC:
268
+ Create the httpd-scc-sysadmin SCC:
277
269
 
278
270
  ```
279
- $ oc describe scc miq-sysadmin | grep Users
280
- Users: system:serviceaccount:<your-namespace>:httpd-configmap-generator
271
+ $ oc create -f templates/httpd-scc-sysadmin.yaml
281
272
  ```
282
273
 
283
- #### If running with OCI systemd hooks
284
-
285
- ##### As Admin
274
+ Include the httpd-configmap-generator service account with the new SCC:
286
275
 
287
276
  ```
288
- $ oc adm policy add-scc-to-user anyuid system:serviceaccount:<your-namespace>:httpd-configmap-generator
277
+ $ oc adm policy add-scc-to-user httpd-scc-sysadmin system:serviceaccount:<your-namespace>:httpd-configmap-generator
289
278
  ```
290
279
 
291
- Verify that the httpd-configmap-generator service account is now included in the miq-sysadmin SCC:
280
+ Verify that the httpd-configmap-generator service account is now included in the httpd-scc-sysadmin SCC:
292
281
 
293
282
  ```
294
- $ oc describe scc anyuid | grep Users
283
+ $ oc describe scc httpd-scc-sysadmin | grep Users
295
284
  Users: system:serviceaccount:<your-namespace>:httpd-configmap-generator
296
285
  ```
297
286
 
298
-
299
287
  ### Deploy the Httpd Configmap Generator Application
300
288
 
301
289
  As basic user
@@ -336,20 +324,20 @@ $ CONFIGMAP_GENERATOR_POD=`oc get pods | grep "httpd-configmap-generator" | cut
336
324
  ### Generating a configmap for external authentication against IPA
337
325
 
338
326
  ```
339
- $ oc rsh $CONFIGMAP_GENERATOR_POD httpd_configmap_generator ipa ...
327
+ $ oc exec $CONFIGMAP_GENERATOR_POD -- bash -c 'httpd_configmap_generator ipa ...
340
328
  ```
341
329
 
342
330
  Example configuration:
343
331
 
344
332
  ```
345
- $ oc rsh $CONFIGMAP_GENERATOR_POD httpd_configmap_generator ipa \
346
- --host=miq-appliance.example.com \
333
+ $ oc exec $CONFIGMAP_GENERATOR_POD -- bash -c 'httpd_configmap_generator ipa \
334
+ --host=appliance.example.com \
347
335
  --ipa-server=ipaserver.example.com \
348
336
  --ipa-domain=example.com \
349
337
  --ipa-realm=EXAMPLE.COM \
350
338
  --ipa-principal=admin \
351
339
  --ipa-password=smartvm1 \
352
- -o /tmp/external-ipa.yaml
340
+ -o /tmp/external-ipa.yaml'
353
341
  ```
354
342
 
355
343
  `--host` above must be the DNS of the application exposing the httpd auth pod,