mirror of
https://github.com/openshift/openshift-docs.git
synced 2026-02-05 12:46:18 +01:00
42 lines
1.1 KiB
Plaintext
42 lines
1.1 KiB
Plaintext
////
|
|
This module included in the following assemblies:
|
|
*service_mesh_/v2x/ossm-extensions.adoc
|
|
////
|
|
:_mod-docs-content-type: PROCEDURE
|
|
[id="ossm-wasmplugin-deploy_{context}"]
|
|
= Deploying `WasmPlugin` resources
|
|
|
|
You can enable {SMProductName} extensions using the `WasmPlugin` resource. In this example, `istio-system` is the name of the {SMProductShortName} control plane project. The following example creates an `openid-connect` filter that performs an OpenID Connect flow to authenticate the user.
|
|
|
|
.Procedure
|
|
|
|
. Create the following example resource:
|
|
+
|
|
.Example plugin.yaml
|
|
[source,yaml]
|
|
----
|
|
apiVersion: extensions.istio.io/v1alpha1
|
|
kind: WasmPlugin
|
|
metadata:
|
|
name: openid-connect
|
|
namespace: istio-system
|
|
spec:
|
|
selector:
|
|
matchLabels:
|
|
istio: ingressgateway
|
|
url: oci://private-registry:5000/openid-connect/openid:latest
|
|
imagePullPolicy: IfNotPresent
|
|
imagePullSecret: private-registry-pull-secret
|
|
phase: AUTHN
|
|
pluginConfig:
|
|
openid_server: authn
|
|
openid_realm: ingress
|
|
----
|
|
|
|
. Apply your `plugin.yaml` file with the following command:
|
|
+
|
|
[source,terminal]
|
|
----
|
|
$ oc apply -f plugin.yaml
|
|
----
|