kuill | A multitenant UI for kubernetes | Dashboard library

Start with the example deployment manifest in hack/deploy/kuill-example-deployment.yml:.
minikube
docker Start a new minikube cluster with RBAC enabled (if you don’t already have one) ```sh minikube start --extra-config apiserver.Authorization.Mode=RBAC ``` Deploy kuill ```sh curl -sL https://raw.githubusercontent.com/matt-deboer/kuill/master/hack/deploy/kuill-dependencies.yml | \ kubectl --context minikube apply -f - curl -sL https://raw.githubusercontent.com/matt-deboer/kuill/master/hack/deploy/kuill-minikube.yml | \ kubectl --context minikube apply -f - ``` View it in your browser ```sh open "http://$(minikube ip):30443/" ```
If you deploy it as-is, you’ll be able to log in as user anonymous with groups system:authenticated.
Optionally, you can configure an identity/authentication mechanism: OpenID+Connect: text --public-url value The public-facing URL for this app, used to compose callbacks for IDPs [$KUILL_PUBLIC_URL] --oidc-provider value The OIDC provider base URL [$KUILL_OIDC_PROVIDER] --oidc-provider-description value The OIDC provider display name [$KUILL_OIDC_PROVIDER_DESCRIPTION] --oidc-provider-name value The OIDC provider short name (identifier) [$KUILL_OIDC_PROVIDER_NAME] --oidc-user-claim value The OIDC claim that should be passed as the user’s ID in kube API proxy calls (default: "email") [$KUILL_OIDC_USER_CLAIM] --oidc-groups-claim value The OIDC claim that should be passed as the user’s groups in kube API proxy calls (default: "groups") [$KUILL_OIDC_GROUPS_CLAIM] --oidc-additional-scopes value A comma-separated list of additional OAuth2 scopes ('openidconnect' is already included) to request (default: "email,profile") [$KUILL_OIDC_ADDITIONAL_SCOPES] --oidc-client-id value The OAuth2 client ID [$KUILL_OIDC_CLIENT_ID] --oidc-client-secret value The OAuth2 client secret [$KUILL_OIDC_CLIENT_SECRET] --oidc-nonce value The OIDC nonce value to use (default: "a3VpbGx2MC4xLWEzLTEyLWdkNDUzOTkzK2xvY2FsX2NoYW5nZXNkNDUzOTkzMzgyYTZjNGY1ZWY2NThjZTBlZDg2ZmFhNTBlYzc3ZjNh") [$KUILL_OIDC_NONCE] --oidc-credentials-in-query Whether to pass client-id and client-secret as query parameters when communicating with the provider [$KUILL_OIDC_CREDENTIALS_IN_QUERY] SAML2: text --public-url value The public-facing URL for this app, used to compose callbacks for IDPs [$KUILL_PUBLIC_URL] --saml-idp-metadata-url value The metadata URL for a SAML identity provider [$KUILL_SAML_IDP_METADATA_URL] --saml-idp-shortname value The short name to use for the saml identity provider [$KUILL_SAML_IDP_SHORTNAME] --saml-idp-description value The description for the saml identity provider [$KUILL_SAML_IDP_DESCRIPTION] --saml-sp-cert value The certificate file to use for this service provider [$KUILL_SAML_SP_CERT] --saml-sp-key value The private key file to use for this service provider [$KUILL_SAML_SP_KEY] --saml-groups-attribute value The name of the attribute containing the user’s groups [$KUILL_SAML_GROUPS_ATTRIBUTE] --saml-groups-delimiter value The delimiter that, if specified, will be used to split single group values into multiple groups [$KUILL_SAML_GROUPS_DELIMITER] --saml-audience value The audience that will be used to verify incoming assertions; defaults to using the metadata url of this service provider [$KUILL_SAML_AUDIENCE] Password File (intended only for testing/demo purposes; see hack/test-users.tsv for example) text --password-file value A file containing tab-delimited set of [user,password,group…​], one per line; for local testing only [$KUILL_PASSWORD_FILE]
Spin up (if not already started) a minikube setup similar to the test-drive script above.
Start a local HMR web dev environment