From 7b444619bb87e36a05667fb546c788ff5d4c8995 Mon Sep 17 00:00:00 2001
From: Khue Doan <khuedoan98@gmail.com>
Date: Fri, 26 Nov 2021 16:24:11 +0700
Subject: [PATCH] feat(tekton): enable external OAUTH authentication for
 Ingress

---
 platform/tekton-pipelines/ingress.yaml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/platform/tekton-pipelines/ingress.yaml b/platform/tekton-pipelines/ingress.yaml
index 93abc135..ee5b246d 100644
--- a/platform/tekton-pipelines/ingress.yaml
+++ b/platform/tekton-pipelines/ingress.yaml
@@ -5,6 +5,9 @@ metadata:
   namespace: tekton-pipelines
   labels:
     cert-manager.io/cluster-issuer: "selfsigned-cluster-issuer"
+  annotations:
+    nginx.ingress.kubernetes.io/auth-url: "https://$host/oauth2/auth"
+    nginx.ingress.kubernetes.io/auth-signin: "https://$host/oauth2/start?rd=$escaped_request_uri"
 spec:
   rules:
   - host: tekton.khuedoan.com