diff --git a/README.md b/README.md index ce8d6ad..21d6064 100644 --- a/README.md +++ b/README.md @@ -11,7 +11,7 @@ Terraform module for deploying and configuring Keycloak on EKS clusters. Keycloak is a temporary OIDC solution to our clusters for enabling SSO login to the three web applications core to observability with the platform, ie. the Kubernetes Dashboard, Grafana and Kiali. Eventually, Keycloak will be replaced with OKTA provided OIDC, once TCO is ready for supporting this integration. Keycloak works in concert with GoGatekeeper that serves as an OIDC proxy fronting the web applications and validating the tokens originating from Keycloak. In our current configuration, we have a single generic user named `user` that acts as a master key for authenticating with Keycloak in the `cluster-user` realm, which is created by this module, and may access any of these applications. To retrieve the generic user password, run the following command: `kubectl get secret -n keycloak keycloak-user-creds -o jsonpath="{.data.password}" | base64 --decode ; echo` ### Explanation of architecture -![Explanation of architecture](./keycloak-gatekeeper.png "Explanation of architecture") +![Explanation of architecture](./docs/keycloak-gatekeeper.png "Explanation of architecture") ## Prerequisites - Kubernetes cluster (EKS) @@ -110,7 +110,7 @@ Common issues and solutions: | Name | Description | Type | Default | Required | |------|-------------|------|---------|:--------:| | [account\_id](#input\_account\_id) | aws account number | `string` | `""` | no | -| [admin\_email](#input\_admin\_email) | The email address of the admin of the default realm. | `string` | `"luther.coleman.mcginty@census.gov"` | no | +| [admin\_email](#input\_admin\_email) | The email address of the admin of the default realm. | `string` | `"email@example.com"` | no | | [cluster\_domain](#input\_cluster\_domain) | The domain name used to reference ingresses for the cluster. | `string` | n/a | yes | | [cluster\_name](#input\_cluster\_name) | EKS cluster name name component used through out the EKS cluster describing its purpose (ex: dice-dev) | `string` | n/a | yes | | [default\_realm](#input\_default\_realm) | The default realm to use to configure the environment. | `string` | `"cluster-user"` | no | diff --git a/variables.tf b/variables.tf index 6a1d6df..1fc28da 100644 --- a/variables.tf +++ b/variables.tf @@ -8,7 +8,7 @@ variable "account_id" { variable "admin_email" { description = "The email address of the admin of the default realm." type = string - default = "luther.coleman.mcginty@census.gov" + default = "email@example.com" } variable "cluster_domain" {