{"id":22268225,"url":"https://github.com/curityio/curity-idsvr-aws-eks-demo-installation","last_synced_at":"2026-05-06T22:08:54.924Z","repository":{"id":61422179,"uuid":"510751826","full_name":"curityio/curity-idsvr-aws-eks-demo-installation","owner":"curityio","description":"A demo installation of Curity Identity Server, Nginx Ingress controller in AWS Elastic Kubernetes Engine for PoC purposes","archived":false,"fork":false,"pushed_at":"2022-12-06T11:39:22.000Z","size":168,"stargazers_count":2,"open_issues_count":0,"forks_count":1,"subscribers_count":4,"default_branch":"main","last_synced_at":"2025-01-30T13:31:47.923Z","etag":null,"topics":["aws","deployment","eks","helm","kubernetes"],"latest_commit_sha":null,"homepage":"https://github.com/curityio/curity-idsvr-aws-eks-demo-installation","language":"HCL","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/curityio.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2022-07-05T13:38:40.000Z","updated_at":"2023-04-27T09:55:16.000Z","dependencies_parsed_at":"2023-01-24T01:31:01.923Z","dependency_job_id":null,"html_url":"https://github.com/curityio/curity-idsvr-aws-eks-demo-installation","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/curityio%2Fcurity-idsvr-aws-eks-demo-installation","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/curityio%2Fcurity-idsvr-aws-eks-demo-installation/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/curityio%2Fcurity-idsvr-aws-eks-demo-installation/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/curityio%2Fcurity-idsvr-aws-eks-demo-installation/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/curityio","download_url":"https://codeload.github.com/curityio/curity-idsvr-aws-eks-demo-installation/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":245486242,"owners_count":20623239,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["aws","deployment","eks","helm","kubernetes"],"created_at":"2024-12-03T11:11:58.526Z","updated_at":"2026-05-06T22:08:49.905Z","avatar_url":"https://github.com/curityio.png","language":"HCL","funding_links":[],"categories":[],"sub_categories":[],"readme":"#  Curity Identity Server EKS Installation\n\n[![Quality](https://img.shields.io/badge/quality-experiment-red)](https://curity.io/resources/code-examples/status/)\n[![Availability](https://img.shields.io/badge/availability-source-blue)](https://curity.io/resources/code-examples/status/)\n\nThis tutorial will enable any developer or an architect to quickly run the Curity Identity Server and the Phantom Token Pattern in Kubernetes using NGINX Ingress controller in the AWS Elastic Kubernetes Engine.\n\nThis installation follows the security best practice to host the Identity server and the APIs behind an Ingress controller acting as an Reverse proxy/API gateway. This will ensure that opaque access tokens are issued to internet clients, while APIs receive JWT access tokens.\n\n## Prepare the Installation\n\nDeployment on AWS EKS has the following prerequisites:\n* [AWS Account](https://aws.amazon.com/premiumsupport/knowledge-center/create-and-activate-aws-account/) \n* [AWS CLI](https://docs.aws.amazon.com/cli/latest/userguide/getting-started-install.html) installed and configured.\n* [Helm](https://helm.sh/)\n* [kubectl](https://kubernetes.io/docs/tasks/tools/)\n* [eksctl](https://docs.aws.amazon.com/eks/latest/userguide/eksctl.html)\n* [terraform](https://www.terraform.io/downloads)\n* [OpenSSL](https://www.openssl.org/)\n* [jq](https://stedolan.github.io/jq/) \n\nMake sure you have above prerequisites installed and then copy a license file to the `idsvr-config/license.json` location.\nIf needed, you can also get a free community edition license from the [Curity Developer Portal](https://developer.curity.io).\n\n\n## Deployment Pattern\n\nAll of the services are running privately in the aws elastic kubernetes cluster and exposed via a https load balancer.\n\n![deployment pattern](./docs/deployment-aws.png \"deployment pattern\")\n\n## Installation\n\n 1. Clone the repository\n    ```sh\n    git clone git@github.com:curityio/curity-idsvr-aws-eks-demo-installation.git\n    cd curity-idsvr-aws-eks-demo-installation\n    ```\n\n\n 2. Configuration\n \n    Cluster options could be configured by modifying `infrastructure-config/infra-config.json` file. Please note that the region set in the `infrastructure-config/infra-config.json` must match the region set for aws cli (~/.aws/config).\n\n\n 3. Install the environment  \n    ```sh\n    ./deploy-idsvr-aws-eks.sh --install\n    ```   \n\n\n4. Shutdown environment  \n    ```sh\n    ./deploy-idsvr-aws-eks.sh --stop\n    ```  \n\n\n5. Start the environment  \n    ```sh\n    ./deploy-idsvr-aws-eks.sh --start\n    ```  \n\n\n6. Clean up\n    ```sh\n    ./deploy-idsvr-aws-eks.sh --delete\n    ```\n\n\n7. Logs\n    ```sh\n     kubectl -n curity logs -f -l role=curity-idsvr-runtime\n     kubectl -n curity logs -f -l role=curity-idsvr-admin  \n     kubectl -n ingress-nginx logs -f -l app.kubernetes.io/component=controller\n     kubectl -n api logs -f -l app=example-api\n    ```\n\n\n    ```sh\n      ./deploy-idsvr-aws-eks.sh -h\n      Usage: manage-environment.sh [-h | --help] [-i | --install]  [-d | --delete]\n\n      ** DESCRIPTION **\n      This script can be used to manage a eks cluster and Curity Identity Server installation.\n\n      OPTIONS\n\n      --help                        show this help message and exit\n      --install                     creates eks cluster \u0026 deploys Curity Identity Server along with other components\n      --start                       starts the environment   \n      --stop                        shuts down the environment\n      --load-balancer-public-ip     prints the public IP address of the load balancer                                                \n      --delete                      deletes the eks cluster \u0026 Curity Identity Server deployment\n    ```\n   \n\n## Environment URLs\n\n| Service             | URL                                                           | Purpose                                                         |\n| --------------------|:------------------------------------------------------------- | ----------------------------------------------------------------|\n| ADMIN UI            | https://admin.example.eks/admin                               | Curity Administration console                                   |\n| OIDC METADATA       | https://login.example.eks/~/.well-known/openid-configuration  | Curity OIDC metadata discovery endpoint                         |\n| EXAMPLE API         | https://api.example.eks/echo                                  | API endpoint protected by phantom-token flow                    |\n\n\n\nFor a detailed step by step installation instructions, please refer to [Installing the Curity Identity Server in AWS EKS](https://curity.io/resources/learn/kubernetes-aws-eks-idsvr-deployment) article.\n\n## More Information\n\nPlease visit [curity.io](https://curity.io/) for more information about the Curity Identity Server.","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fcurityio%2Fcurity-idsvr-aws-eks-demo-installation","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fcurityio%2Fcurity-idsvr-aws-eks-demo-installation","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fcurityio%2Fcurity-idsvr-aws-eks-demo-installation/lists"}