httpd_configmap_generator 0.1.1 → 0.3.0

Sign up to get free protection for your applications and to get access to all the features.
Files changed (35) hide show
  1. checksums.yaml +5 -5
  2. data/.gitignore +1 -0
  3. data/.travis.yml +3 -2
  4. data/.yamllint +11 -0
  5. data/Dockerfile +3 -2
  6. data/Gemfile +4 -0
  7. data/README-active-directory.md +11 -15
  8. data/README-ipa.md +7 -12
  9. data/README-ldap.md +62 -0
  10. data/README-oidc.md +39 -0
  11. data/README-saml.md +9 -14
  12. data/README.md +37 -49
  13. data/bin/httpd_configmap_generator +36 -50
  14. data/httpd_configmap_generator.gemspec +5 -3
  15. data/lib/httpd_configmap_generator.rb +2 -0
  16. data/lib/httpd_configmap_generator/active_directory.rb +2 -2
  17. data/lib/httpd_configmap_generator/base.rb +10 -6
  18. data/lib/httpd_configmap_generator/base/command.rb +19 -17
  19. data/lib/httpd_configmap_generator/base/config_helper.rb +15 -0
  20. data/lib/httpd_configmap_generator/base/config_map.rb +43 -26
  21. data/lib/httpd_configmap_generator/base/file_helper.rb +67 -0
  22. data/lib/httpd_configmap_generator/base/kerberos.rb +10 -8
  23. data/lib/httpd_configmap_generator/base/network.rb +27 -25
  24. data/lib/httpd_configmap_generator/base/pam.rb +6 -4
  25. data/lib/httpd_configmap_generator/base/sssd.rb +1 -1
  26. data/lib/httpd_configmap_generator/ipa.rb +12 -1
  27. data/lib/httpd_configmap_generator/ldap.rb +186 -0
  28. data/lib/httpd_configmap_generator/oidc.rb +48 -0
  29. data/lib/httpd_configmap_generator/saml.rb +16 -14
  30. data/lib/httpd_configmap_generator/version.rb +1 -1
  31. data/templates/httpd-scc-sysadmin.yaml +38 -0
  32. metadata +18 -14
  33. data/lib/httpd_configmap_generator/base/config.rb +0 -13
  34. data/lib/httpd_configmap_generator/base/file.rb +0 -65
  35. data/lib/httpd_configmap_generator/options.rb +0 -13
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
- SHA1:
3
- metadata.gz: 269f3519101488e9580699f67f1fa479f1db78f6
4
- data.tar.gz: 3224b233aedc0c5ae68cb0299d2438e165b2b7f5
2
+ SHA256:
3
+ metadata.gz: aff6b3f7af181564f46a046634efe1965f4ed7936db37d143afa8d5ad0e59890
4
+ data.tar.gz: ebd0cfa723b123acd3cc8beac4b30e8349991c0563a93289cacd71440798a644
5
5
  SHA512:
6
- metadata.gz: a0d1935e46028b58c93d019e38b1133d2653414ae77d4bc0e33182a7d1d1230c43bdf12dd5cccd233c381bf6aa8c9fe3a632c37bd220dd3a2ec8cc820b3d1301
7
- data.tar.gz: 7d85650f7f2b59dc7db1345e48e0486687fea752482232d3d1cccbde9b20e273b455003cbc45eaadff9bbd62a58b11d243abed5f23debcd57374b35da60f987e
6
+ metadata.gz: 430913f53ac70692b10393aaaad7c94619a6a7b674871e84286a88020f86ee1bdd2fbfe8e87fa74a031402a07e7d5c6ca6dffe18de51c4465039ebc35ddde2ac
7
+ data.tar.gz: 149a5aa5978a38e573d112a0138f7574a09b1427b225aaf79d528b039e9ea7a11a5a0a6e392917e9d4c4baa01f5a5603e81d71ae08eba95950426e70d7d71ba7
data/.gitignore CHANGED
@@ -1,3 +1,4 @@
1
+ Dockerfile.devel
1
2
  .rubocop-*
2
3
  /bundle/
3
4
  /.bundle/
data/.travis.yml CHANGED
@@ -1,7 +1,8 @@
1
+ ---
1
2
  language: ruby
2
3
  rvm:
3
- - '2.3.5'
4
- - '2.4.2'
4
+ - 2.5.7
5
+ - 2.6.5
5
6
  sudo: false
6
7
  cache: bundler
7
8
  after_script: bundle exec codeclimate-test-reporter
data/.yamllint ADDED
@@ -0,0 +1,11 @@
1
+ ---
2
+ ignore: |
3
+ /vendor/**
4
+
5
+ extends: relaxed
6
+
7
+ rules:
8
+ indentation:
9
+ indent-sequences: false
10
+ line-length:
11
+ max: 120
data/Dockerfile CHANGED
@@ -1,4 +1,4 @@
1
- FROM manageiq/httpd:latest
1
+ FROM manageiq/httpd-init:latest
2
2
  MAINTAINER ManageIQ https://github.com/ManageIQ
3
3
 
4
4
  LABEL name="httpd-configmap-generator" \
@@ -11,6 +11,7 @@ ENV HTTPD_AUTH_TYPE=internal \
11
11
  HTTPD_AUTH_KERBEROS_REALMS=undefined \
12
12
  TERM=xterm
13
13
 
14
- RUN yum -y install openldap-clients pamtester
14
+ RUN dnf -y --disableplugin=subscription-manager install https://dl.fedoraproject.org/pub/epel/epel-release-latest-8.noarch.rpm && \
15
+ dnf -y --disableplugin=subscription-manager install openldap-clients pamtester
15
16
 
16
17
  RUN gem install --no-ri --no-rdoc --no-document httpd_configmap_generator
data/Gemfile CHANGED
@@ -2,3 +2,7 @@ source "https://rubygems.org"
2
2
 
3
3
  # Leverage the httpd_configmap_generator.gemspec
4
4
  gemspec
5
+
6
+ # Load other additional Gemfiles
7
+ # Developers can create a file ending in .rb under bundler.d/ to specify additional development dependencies
8
+ Dir.glob(File.join(__dir__, 'bundler.d/*.rb')).each { |f| eval_gemfile(File.expand_path(f, __dir__)) }
data/README-active-directory.md CHANGED
@@ -8,21 +8,17 @@ by joining an Active Directory domain.
8
8
 
9
9
  ```
10
10
  $ httpd_configmap_generator active-directory --help
11
- httpd_configmap_generator 0.1.0 - External Authentication Configuration script
12
-
13
- Usage: httpd_configmap_generator auth_type | update | export [--help | options]
14
-
15
- httpd_configmap_generator options are:
16
- -V, --version Version of the httpd_configmap_generator command
17
- -h, --host=<s> Application Domain (default: )
18
- -o, --output=<s> Configuration map file to create (default: )
19
- -a, --ad-domain=<s> Active Directory Domain (default: )
20
- -u, --ad-server=<s> Active Directory User (default: )
21
- -p, --ad-password=<s> Active Directory Password (default: )
22
- -f, --force Force configuration if configured already
23
- -d, --debug Enable debugging
24
- -r, --ad-realm=<s> Active Directory Realm (default: )
25
- -e, --help Show this message
11
+ Options:
12
+ -h, --host=<s> Application Domain
13
+ -o, --output=<s> Configuration map file to create
14
+ -a, --ad-domain=<s> Active Directory Domain
15
+ -u, --ad-user=<s> Active Directory User
16
+ -p, --ad-password=<s> Active Directory Password
17
+ -f, --force Force configuration if configured already
18
+ -d, --debug Enable debugging
19
+ -r, --ad-realm=<s> Active Directory Realm
20
+ -s, --ad-server=<s> Active Directory Server
21
+ -e, --help Show this message
26
22
  ```
27
23
 
28
24
  ### Example:
data/README-ipa.md CHANGED
@@ -8,21 +8,16 @@ for an IPA server.
8
8
 
9
9
  ```
10
10
  $ httpd_configmap_generator ipa --help
11
- httpd_configmap_generator 0.1.0 - External Authentication Configuration script
12
-
13
- Usage: httpd_configmap_generator auth_type | update | export [--help | options]
14
-
15
- httpd_configmap_generator options are:
16
- -V, --version Version of the httpd_configmap_generator command
17
- -h, --host=<s> Application Domain (default: )
18
- -o, --output=<s> Configuration map file to create (default: )
19
- -i, --ipa-server=<s> IPA Server Fqdn (default: )
20
- -p, --ipa-password=<s> IPA Server Password (default: )
11
+ Options:
12
+ -h, --host=<s> Application Domain
13
+ -o, --output=<s> Configuration map file to create
14
+ -i, --ipa-server=<s> IPA Server FQDN
15
+ -p, --ipa-password=<s> IPA Server Password
21
16
  -f, --force Force configuration if configured already
22
17
  -d, --debug Enable debugging
23
18
  -a, --ipa-principal=<s> IPA Server Principal (default: admin)
24
- -m, --ipa-domain=<s> Domain of IPA Server (default: )
25
- -r, --ipa-realm=<s> Realm of IPA Server (default: )
19
+ -m, --ipa-domain=<s> Domain of IPA Server
20
+ -r, --ipa-realm=<s> Realm of IPA Server
26
21
  -e, --help Show this message
27
22
  ```
28
23
 
data/README-ldap.md ADDED
@@ -0,0 +1,62 @@
1
+ # Httpd Configmap Generator - LDAP
2
+
3
+ This documents how to run the httpd\_configmap\_generator tool to configure external authentication
4
+ for an LDAP server.
5
+
6
+
7
+ ## Usage for the `ldap` auth-type:
8
+
9
+ ```
10
+ $ httpd_configmap_generator ldap --help
11
+ Options:
12
+ -h, --host=<s> Application Domain
13
+ -o, --output=<s> Configuration map file to create
14
+ -c, --cert-file=<s> Cert File
15
+ -l, --ldap-host=<s> LDAP Directory Host FQDN
16
+ -a, --ldap-mode=<s> ldap | ldaps
17
+ -p, --ldap-basedn=<s> LDAP Directory Base DN
18
+ -f, --force Force configuration if configured already
19
+ -d, --debug Enable debugging
20
+ -g, --ldap-group-name=<s> LDAP Directory Group Name (default: cn)
21
+ -r, --ldap-group-member=<s> Attribute containing the names of the
22
+ group's members (default: member)
23
+ -u, --ldap-group-object-class=<s> The object class of a group entry in
24
+ LDAP (default: groupOfNames)
25
+ -i, --ldap-id-use-start-tls,
26
+ --no-ldap-id-use-start-tls Connection use tls? (default: true)
27
+ -t, --ldap-port=<s> LDAP Directory Port
28
+ -s, --ldap-tls-reqcert=<s> The checks to perform on server
29
+ certificates. (Default: allow)
30
+ -e, --ldap-user-gid-number=<s> LDAP attribute corresponding to the
31
+ user's gid (default: gidNumber)
32
+ -n, --ldap-user-name=<s> LDAP Directory User Name (default: cn)
33
+ -b, --ldap-user-object-class=<s> Object class of a user entry in LDAP
34
+ (default: posixAccount)
35
+ -m, --ldap-user-uid-number=<s> LDAP attribute corresponding to the
36
+ user's id (default: uidNumber)
37
+ --ldap-user-search-base=<s> The user DN search scope
38
+ --ldap-group-search-base=<s> The group DN search scope
39
+ -x, --support-non-posix Supports non-posix user records
40
+ --help Shows this message
41
+ ```
42
+
43
+ ### Example:
44
+
45
+ ```
46
+ $ httpd_configmap_generator ldap \
47
+ --force \
48
+ --host=application.example.com \
49
+ --ldap-mode=ldap \
50
+ --ldap-host=ldap-server.example.com \
51
+ --ldap-port=10389 \
52
+ --ldap-basedn=dc=example,dc=com \
53
+ --ldap-group-name=cn \
54
+ --ldap-group-search-base=ou=groups,dc=example,dc=com \
55
+ --ldap-group-object-class=groupOfNames \
56
+ --ldap-user-name=uid \
57
+ --ldap-user-search-base=ou=users,dc=example,dc=com \
58
+ --ldap-user-object-class=person \
59
+ --cert-file=/etc/openldap/cacerts/apacheds-cert.pem \
60
+ --debug \
61
+ -o /tmp/external-ldap.yaml
62
+ ```
data/README-oidc.md ADDED
@@ -0,0 +1,39 @@
1
+ # Httpd Configmap Generator - OpenID-Connect (OIDC)
2
+
3
+ This documents how to run the httpd\_configmap\_generator tool to configure the container against an OpenID-Connect (OIDC) identity provider.
4
+
5
+ ## Usage for the `oidc` auth-type:
6
+
7
+ ```
8
+ $ httpd_configmap_generator oidc --help
9
+ Options:
10
+ -o, --output=<s> Configuration map file to create
11
+ -u, --oidc-url=<s> OpenID-Connect Provider URL
12
+ -i, --oidc-client-id=<s> OpenID-Connect Provider Client ID
13
+ -s, --oidc-client-secret=<s> OpenID-Connect Provider Client Secret
14
+ -f, --force Force configuration if configured already
15
+ -d, --debug Enable debugging
16
+ -h, --help Show this message
17
+
18
+ ```
19
+
20
+ ### Examples:
21
+
22
+ Creates the extra data for the container:
23
+
24
+ ```
25
+ $ httpd_configmap_generator oidc \
26
+ --force \
27
+ --oidc-url=http://my-keycloak:8080/auth/realms/miq/.well-known/openid-configuration \
28
+ --oidc-client-id=my-keycloak-oidc-client \
29
+ --oidc-client-secret=99999999-9999-9999-a999-99999a999999 \
30
+ --debug \
31
+ -o /tmp/external-oidc.yaml
32
+ ```
33
+
34
+ The auth configmap file for oidc does not include any files. It only includes the following extra data:
35
+
36
+ * auth-oidc-provider-metadata-url
37
+ * auth-oidc-client-id
38
+ * auth-oidc-client-secret
39
+
data/README-saml.md CHANGED
@@ -6,19 +6,14 @@ This documents how to run the httpd\_configmap\_generator tool to configure the
6
6
 
7
7
  ```
8
8
  $ httpd_configmap_generator saml --help
9
- httpd_configmap_generator 0.1.0 - External Authentication Configuration script
10
-
11
- Usage: httpd_configmap_generator auth_type | update | export [--help | options]
12
-
13
- httpd_configmap_generator options are:
14
- -V, --version Version of the httpd_configmap_generator command
15
- -h, --host=<s> Application Domain (default: )
16
- -o, --output=<s> Configuration map file to create (default: )
9
+ Options:
10
+ -h, --host=<s> Application Domain
11
+ -o, --output=<s> Configuration map file to create
17
12
  -f, --force Force configuration if configured already
18
13
  -d, --debug Enable debugging
19
14
  -k, --keycloak-add-metadata Download and add the Keycloak metadata file
20
- -e, --keycloak-server=<s> Keycloak Server Fqdn or IP (default: )
21
- -y, --keycloak-realm=<s> Keycloak Realm for this client (default: )
15
+ -e, --keycloak-server=<s> Keycloak Server FQDN or IP
16
+ -y, --keycloak-realm=<s> Keycloak Realm for this client
22
17
  -l, --help Show this message
23
18
  ```
24
19
 
@@ -61,10 +56,10 @@ $ httpd_configmap_generator saml \
61
56
  In the above example, the auth configmap file would include the following files:
62
57
 
63
58
  * /etc/httpd/saml2/
64
- - miqsp-metadata.xml
65
- - miqsp-cert.cert
66
- - miqsp-key.key
59
+ - sp-metadata.xml
60
+ - sp-cert.cert
61
+ - sp-key.key
67
62
  - idp-metadata.xml
68
63
 
69
- For Keycloak, the `miqsp-metadata.xml` file can be imported to create the Client ID for
64
+ For Keycloak, the `sp-metadata.xml` file can be imported to create the Client ID for
70
65
  the `application.example.com` application domain.
data/README.md CHANGED
@@ -1,7 +1,7 @@
1
1
  # Httpd Configmap Generator
2
2
 
3
3
  [![Gem Version](https://badge.fury.io/rb/httpd_configmap_generator.svg)](http://badge.fury.io/rb/httpd_configmap_generator)
4
- [![Build Status](https://travis-ci.org/ManageIQ/httpd_configmap_generator.svg)](https://travis-ci.org/ManageIQ/httpd_configmap_generator)
4
+ [![Build Status](https://travis-ci.org/ManageIQ/httpd_configmap_generator.svg?branch=master)](https://travis-ci.org/ManageIQ/httpd_configmap_generator)
5
5
  [![Code Climate](https://codeclimate.com/github/ManageIQ/httpd_configmap_generator.svg)](https://codeclimate.com/github/ManageIQ/httpd_configmap_generator)
6
6
  [![Test Coverage](https://codeclimate.com/github/ManageIQ/httpd_configmap_generator/badges/coverage.svg)](https://codeclimate.com/github/ManageIQ/httpd_configmap_generator/coverage)
7
7
  [![Dependency Status](https://gemnasium.com/ManageIQ/httpd_configmap_generator.svg)](https://gemnasium.com/ManageIQ/httpd_configmap_generator)
@@ -23,10 +23,16 @@ gem install httpd_configmap_generator
23
23
  Generating an auth-config map can be done by running the httpd\_configmap\_generator tool
24
24
 
25
25
  ```
26
- $ httpd_configmap_generator
26
+ $ httpd_configmap_generator --help
27
+ httpd_configmap_generator 0.1.1 - External Authentication Configuration script
27
28
 
28
29
  Usage: httpd_configmap_generator auth_type | update | export [--help | options]
29
- Supported auth_type: active-directory, ipa, saml
30
+
31
+ supported auth_type: active-directory, ipa, ldap, saml, oidc
32
+
33
+ httpd_configmap_generator options are:
34
+ -V, --version Version of the httpd_configmap_generator command
35
+ -h, --help Show this message
30
36
  ```
31
37
 
32
38
  Showing the usage for each authentication type or sub-command as follows:
@@ -37,11 +43,13 @@ $ httpd_configmap_generator ipa --help
37
43
 
38
44
  ## Supported Authentication Types
39
45
 
40
- |auth-type | Identity Provider/Environment | for usage: |
41
- |------------------|------------------------------------------------|------------|
42
- | active-directory | Active Directory domain realm join | [README-active-directory](README-active-directory.md) |
43
- | ipa | IPA, IPA 2-factor authentication, IPA/AD Trust | [README-ipa](README-ipa.md) |
44
- | saml | Keycloak, etc. | [README-saml](README-saml.md) |
46
+ |auth-type | Identity Provider/Environment | for usage: |
47
+ |-----------------------------------|--------------------------------------------------|-------------------------------------------------------|
48
+ | active-directory | Active Directory domain realm join | [README-active-directory](README-active-directory.md) |
49
+ | ipa | IPA, IPA 2-factor authentication, IPA/AD Trust | [README-ipa](README-ipa.md) |
50
+ | ldap | Ldap directories | [README-ldap](README-ldap.md) |
51
+ | saml | Keycloak, etc. | [README-saml](README-saml.md) |
52
+ | OpenID-Connect (oidc) | Keycloak, etc. | [README-oidc](README-oidc.md) |
45
53
 
46
54
  ___
47
55
 
@@ -53,17 +61,12 @@ map as per the following usage:
53
61
 
54
62
  ```
55
63
  $ httpd_configmap_generator update --help
56
- httpd_configmap_generator 0.1.0 - External Authentication Configuration script
57
-
58
- Usage: httpd_configmap_generator auth_type | update | export [--help | options]
59
-
60
- httpd_configmap_generator options are:
61
- -V, --version Version of the httpd_configmap_generator command
62
- -i, --input=<s> Input config map file (default: )
63
- -o, --output=<s> Output config map file (default: )
64
+ Options:
65
+ -i, --input=<s> Input config map file
66
+ -o, --output=<s> Output config map file
64
67
  -f, --force Force configuration if configured already
65
68
  -d, --debug Enable debugging
66
- -a, --add-file=<s> Add file to config map (default: )
69
+ -a, --add-file=<s> Add file to config map
67
70
  -h, --help Show this message
68
71
  ```
69
72
 
@@ -127,7 +130,7 @@ $ httpd_configmap_generator update \
127
130
  ```
128
131
  $ httpd_configmap_generator update \
129
132
  --input=/tmp/original-auth-configmap.yaml \
130
- --add-file=http://aab-keycloak:8080/auth/realms/miq/protocol/saml/description,/etc/httpd/saml2/idp-metadata.xml,644:root:root \
133
+ --add-file=http://aab-keycloak:8080/auth/realms/testrealm/protocol/saml/description,/etc/httpd/saml2/idp-metadata.xml,644:root:root \
131
134
  --output=/tmp/updated-auth-configmap.yaml
132
135
  ```
133
136
 
@@ -143,15 +146,10 @@ map as per the following usage:
143
146
 
144
147
  ```
145
148
  $ httpd_configmap_generator export --help
146
- httpd_configmap_generator 0.1.0 - External Authentication Configuration script
147
-
148
- Usage: httpd_configmap_generator auth_type | update | export [--help | options]
149
-
150
- httpd_configmap_generator options are:
151
- -V, --version Version of the httpd_configmap_generator command
152
- -i, --input=<s> Input config map file (default: )
153
- -l, --file=<s> Config map file to export (default: )
154
- -o, --output=<s> The output file being exported (default: )
149
+ Options:
150
+ -i, --input=<s> Input config map file
151
+ -l, --file=<s> Config map file to export
152
+ -o, --output=<s> The output file being exported
155
153
  -f, --force Force configuration if configured already
156
154
  -d, --debug Enable debugging
157
155
  -h, --help Show this message
@@ -218,7 +216,7 @@ Example for generating a configuration map for IPA:
218
216
 
219
217
  ```
220
218
  $ docker exec $CONFIGMAP_GENERATOR_ID httpd_configmap_generator ipa \
221
- --host=miq-appliance.example.com \
219
+ --host=appliance.example.com \
222
220
  --ipa-server=ipaserver.example.com \
223
221
  --ipa-domain=example.com \
224
222
  --ipa-realm=EXAMPLE.COM \
@@ -263,39 +261,29 @@ ___
263
261
 
264
262
  ### Pre-deployment tasks
265
263
 
266
- #### If running without OCI systemd hooks (Minishift)
267
-
268
- The httpd-configmap-generator service account must be added to the miq-sysadmin SCC before the Httpd Auth Config pod can run.
264
+ The httpd-configmap-generator service account must be added to the httpd-scc-sysadmin SCC before the Httpd Configmap Generator can run.
269
265
 
270
266
  ##### As Admin
271
267
 
272
- ```
273
- $ oc adm policy add-scc-to-user miq-sysadmin system:serviceaccount:<your-namespace>:httpd-configmap-generator
274
- ```
275
-
276
- Verify that the httpd-configmap-generator service account is now included in the miq-sysadmin SCC:
268
+ Create the httpd-scc-sysadmin SCC:
277
269
 
278
270
  ```
279
- $ oc describe scc miq-sysadmin | grep Users
280
- Users: system:serviceaccount:<your-namespace>:httpd-configmap-generator
271
+ $ oc create -f templates/httpd-scc-sysadmin.yaml
281
272
  ```
282
273
 
283
- #### If running with OCI systemd hooks
284
-
285
- ##### As Admin
274
+ Include the httpd-configmap-generator service account with the new SCC:
286
275
 
287
276
  ```
288
- $ oc adm policy add-scc-to-user anyuid system:serviceaccount:<your-namespace>:httpd-configmap-generator
277
+ $ oc adm policy add-scc-to-user httpd-scc-sysadmin system:serviceaccount:<your-namespace>:httpd-configmap-generator
289
278
  ```
290
279
 
291
- Verify that the httpd-configmap-generator service account is now included in the miq-sysadmin SCC:
280
+ Verify that the httpd-configmap-generator service account is now included in the httpd-scc-sysadmin SCC:
292
281
 
293
282
  ```
294
- $ oc describe scc anyuid | grep Users
283
+ $ oc describe scc httpd-scc-sysadmin | grep Users
295
284
  Users: system:serviceaccount:<your-namespace>:httpd-configmap-generator
296
285
  ```
297
286
 
298
-
299
287
  ### Deploy the Httpd Configmap Generator Application
300
288
 
301
289
  As basic user
@@ -336,20 +324,20 @@ $ CONFIGMAP_GENERATOR_POD=`oc get pods | grep "httpd-configmap-generator" | cut
336
324
  ### Generating a configmap for external authentication against IPA
337
325
 
338
326
  ```
339
- $ oc rsh $CONFIGMAP_GENERATOR_POD httpd_configmap_generator ipa ...
327
+ $ oc exec $CONFIGMAP_GENERATOR_POD -- bash -c 'httpd_configmap_generator ipa ...
340
328
  ```
341
329
 
342
330
  Example configuration:
343
331
 
344
332
  ```
345
- $ oc rsh $CONFIGMAP_GENERATOR_POD httpd_configmap_generator ipa \
346
- --host=miq-appliance.example.com \
333
+ $ oc exec $CONFIGMAP_GENERATOR_POD -- bash -c 'httpd_configmap_generator ipa \
334
+ --host=appliance.example.com \
347
335
  --ipa-server=ipaserver.example.com \
348
336
  --ipa-domain=example.com \
349
337
  --ipa-realm=EXAMPLE.COM \
350
338
  --ipa-principal=admin \
351
339
  --ipa-password=smartvm1 \
352
- -o /tmp/external-ipa.yaml
340
+ -o /tmp/external-ipa.yaml'
353
341
  ```
354
342
 
355
343
  `--host` above must be the DNS of the application exposing the httpd auth pod,