hub

README

service-hub

Hub service is the auth service for sealos registry.

Description

Hub service is the auth service for sealos registry.

Sealos registry hub.sealos.cn auth server is at https://hubauth.login.sealos.io/auth.

Sealos use user's kubeconfig yaml as password to auth

Step-by-step installation and run

1. A Running sealos kubernetes cluster with admin access.

   sealos run labring/kubernetes:v1.25.0 labring/helm:v3.8.2 labring/calico:v3.24.1 --masters xxx --nodes xxx -p/-pk
   

2. Cluster must have helm and openebs installed as base requirement.

   sealos run labring/helm:v3.8.2 
   sealos run labring/openebs:v1.9.0
   

3. Apply hub auth service yaml, must change crts and keys.

   kubectl apply -f deploy/manifests/depoly.yaml
   

Authenticate and authorize process

1. Check kubeconfig is generated by sealos cloud and: repalce api server ip to authserver's env $( KUBERNETES_SERVICE_HOST)
2. Use password as kubeconfig to connect sealos cloud kubernetes
3. Invoke kubernetes api /readyz to authenticate
4. For each push request, get organization CR and check user's uuid is in organization CR's manager to authorize
5. Pull request is permittd by default