From 2c6281ae8acaecfa5a47c880c2c17dda5eef028b Mon Sep 17 00:00:00 2001
From: John Bowdre <john@bowdre.net>
Date: Tue, 25 Apr 2023 15:21:53 -0500
Subject: [PATCH] finish first draft of ldap config procedure

---
 ldap/procedure.md | 17 +++++++++++++++++
 1 file changed, 17 insertions(+)

diff --git a/ldap/procedure.md b/ldap/procedure.md
index 4061f41..ddbcd9a 100644
--- a/ldap/procedure.md
+++ b/ldap/procedure.md
@@ -307,4 +307,21 @@ spec:
       LS0tDQo=
 EOF
 kubectl apply -f pinniped-concierge.yaml
+```
+
+Configure ClusterRoleBinding
+```shell
+kubectl create clusterrolebinding let-me-edit \
+  --clusterrole edit \
+  --user john@lab.bowdre.net
+```
+
+Export Pinniped-enhanced kubeconfig
+```shell
+pinniped get kubeconfig > pinniped-kubeconfig
+```
+
+Log in with Pinniped/AD
+```shell
+kubectl get namespaces --kubeconfig ./pinniped-kubeconfig
 ```
\ No newline at end of file