From 3f71306ba0863acd637a6c7a9ce09195fc7b7a99 Mon Sep 17 00:00:00 2001
From: Mark van Holsteijn <mark.van.holsteijn@gmail.com>
Date: Fri, 26 Nov 2021 19:37:08 +0100
Subject: [PATCH] fixed readme

---
 README.md | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/README.md b/README.md
index 1d99bea..5e2b896 100644
--- a/README.md
+++ b/README.md
@@ -30,6 +30,8 @@ target_cluster = {
 
 ## DNS managed zone accessible from the public internet
 dns_managed_zone = "my-managed-zone"
+
+## users you want to grant access via the IAP proxy
 accessors = [
     "user:markvanholsteijn@binx.io",
 ]
@@ -80,6 +82,7 @@ Now you can start the proxy, by copying the outputted command:
 
 ```shell-terminal
 $ go install github.com/binxio/simple-iap-proxy@0.2.0
+$ terraform output -raw iap_proxy_command | sh
 ```
 The reason for the self-signed certificate is that kubectl will not send the credentials over HTTP.