authelia try to patch more db-like vars

This commit is contained in:
kjeld Schouten-Lebbing
2021-08-31 22:30:32 +02:00
parent 714061ac32
commit 7dd3bd5981
6 changed files with 20 additions and 12 deletions
+1 -1
View File
@@ -38,4 +38,4 @@ sources:
- https://github.com/authelia/chartrepo - https://github.com/authelia/chartrepo
- https://github.com/authelia/authelia - https://github.com/authelia/authelia
type: application type: application
version: 1.6.5 version: 1.6.6
@@ -14,7 +14,7 @@ postgresql:
enabled: true enabled: true
postgresqlUsername: authelia postgresqlUsername: authelia
postgresqlDatabase: authelia postgresqlDatabase: authelia
existingSecret: "{{ .Release.Name }}-dbcreds" existingSecret: dbcreds
persistence: persistence:
db: db:
storageClass: "SCALE-ZFS" storageClass: "SCALE-ZFS"
@@ -42,7 +42,7 @@ redis:
envFrom: envFrom:
- configMapRef: - configMapRef:
name: '{{ include "common.names.fullname" . }}-paths' name: authelia-paths
probes: probes:
liveness: liveness:
@@ -4,7 +4,7 @@
apiVersion: v1 apiVersion: v1
kind: ConfigMap kind: ConfigMap
metadata: metadata:
name: {{ include "common.names.fullname" . }}-paths name: authelia-paths
data: data:
AUTHELIA_SERVER_DISABLE_HEALTHCHECK: "true" AUTHELIA_SERVER_DISABLE_HEALTHCHECK: "true"
AUTHELIA_JWT_SECRET_FILE: "/secrets/JWT_TOKEN" AUTHELIA_JWT_SECRET_FILE: "/secrets/JWT_TOKEN"
@@ -33,7 +33,7 @@ data:
apiVersion: v1 apiVersion: v1
kind: ConfigMap kind: ConfigMap
metadata: metadata:
name: {{ include "common.names.fullname" . }}-configfile name: authelia-configfile
data: data:
configuration.yaml: | configuration.yaml: |
--- ---
@@ -37,7 +37,9 @@ metadata:
{{- $sentinelPass := "" }} {{- $sentinelPass := "" }}
data: data:
{{- if $redisprevious }} {{- if $redisprevious }}
redis-password: {{ ( index $redisprevious.data "redis-password" ) }} {{- $redisPass = ( index $redisprevious.data "redis-password" ) | b64dec }}
{{- $sentinelPass = ( index $redisprevious.data "redis-password" ) | b64dec }}
redis-password: {{ ( index $redisprevious.data "sentinel-password" ) }}
sentinel-password: {{ ( index $redisprevious.data "sentinel-password" ) }} sentinel-password: {{ ( index $redisprevious.data "sentinel-password" ) }}
{{- else }} {{- else }}
{{- $redisPass = randAlphaNum 50 }} {{- $redisPass = randAlphaNum 50 }}
@@ -46,7 +48,7 @@ data:
sentinel-password: {{ $sentinelPass | b64enc | quote }} sentinel-password: {{ $sentinelPass | b64enc | quote }}
{{- end }} {{- end }}
masterhost: {{ ( printf "%v-%v" .Release.Name "redis-master" ) | b64enc | quote }} masterhost: {{ ( printf "%v-%v" .Release.Name "redis-master" ) | b64enc | quote }}
slavehost: {{ ( printf "%v-%v" .Release.Name "redis-master" ) | b64enc | quote }} slavehost: {{ ( printf "%v-%v" .Release.Name "redis-slave" ) | b64enc | quote }}
type: Opaque type: Opaque
@@ -56,8 +58,8 @@ apiVersion: v1
kind: Secret kind: Secret
type: Opaque type: Opaque
metadata: metadata:
name: {{ include "common.names.fullname" . }}-secrets name: authelia-secrets
{{- $autheliaprevious := lookup "v1" "Secret" .Release.Namespace ( ( printf "%v-%v" ( ( include "common.names.fullname" . ) | quote ) "-secrets" ) | quote ) }} {{- $autheliaprevious := lookup "v1" "Secret" .Release.Namespace "authelia-secrets" }}
{{- $oidckey := "" }} {{- $oidckey := "" }}
{{- $oidcsecret := "" }} {{- $oidcsecret := "" }}
{{- $jwtsecret := "" }} {{- $jwtsecret := "" }}
@@ -72,20 +74,25 @@ data:
SESSION_ENCRYPTION_KEY: {{ $jwtsecret | b64enc | quote }} SESSION_ENCRYPTION_KEY: {{ $jwtsecret | b64enc | quote }}
JWT_TOKEN: {{ $jwtsecret | b64enc | quote }} JWT_TOKEN: {{ $jwtsecret | b64enc | quote }}
{{- end }} {{- end }}
{{- if .Values.authentication_backend.ldap.enabled }} {{- if .Values.authentication_backend.ldap.enabled }}
LDAP_PASSWORD: {{ .Values.authentication_backend.ldap.plain_password }} LDAP_PASSWORD: {{ .Values.authentication_backend.ldap.plain_password }}
{{- end }} {{- end }}
{{- if .Values.notifier.smtp.enabled }} {{- if .Values.notifier.smtp.enabled }}
SMTP_PASSWORD: {{ .Values.notifier.smtp.plain_password }} SMTP_PASSWORD: {{ .Values.notifier.smtp.plain_password }}
{{- end }} {{- end }}
{{- if .Values.duo_api.enabled }} {{- if .Values.duo_api.enabled }}
DUO_API_KEY: {{ .Values.duo_api.plain_api_key | b64enc }} DUO_API_KEY: {{ .Values.duo_api.plain_api_key | b64enc }}
{{- end }} {{- end }}
{{- if $dbprevious }} {{- if $dbprevious }}
STORAGE_PASSWORD: {{ ( index $dbprevious.data "postgresql-password" ) }} STORAGE_PASSWORD: {{ ( index $dbprevious.data "postgresql-password" ) }}
{{- else }} {{- else }}
STORAGE_PASSWORD: {{ $dbPass | b64enc | quote }} STORAGE_PASSWORD: {{ $dbPass | b64enc | quote }}
{{- end }} {{- end }}
{{- if $redisprevious }} {{- if $redisprevious }}
REDIS_PASSWORD: {{ ( index $redisprevious.data "redis-password" ) }} REDIS_PASSWORD: {{ ( index $redisprevious.data "redis-password" ) }}
{{- if .Values.redisProvider.high_availability.enabled}} {{- if .Values.redisProvider.high_availability.enabled}}
@@ -97,6 +104,7 @@ data:
REDIS_SENTINEL_PASSWORD: {{ $sentinelPass | b64enc | quote }} REDIS_SENTINEL_PASSWORD: {{ $sentinelPass | b64enc | quote }}
{{- end }} {{- end }}
{{- end }} {{- end }}
{{- if .Values.identity_providers.oidc.enabled }} {{- if .Values.identity_providers.oidc.enabled }}
{{- if $autheliaprevious }} {{- if $autheliaprevious }}
OIDC_PRIVATE_KEY: {{ index $autheliaprevious.data "OIDC_PRIVATE_KEY" }} OIDC_PRIVATE_KEY: {{ index $autheliaprevious.data "OIDC_PRIVATE_KEY" }}
@@ -16,7 +16,7 @@ subPath: configuration.yaml
type: "custom" type: "custom"
volumeSpec: volumeSpec:
configMap: configMap:
name: {{ include "common.names.fullname" . }}-configfile name: authelia-configfile
items: items:
- key: configuration.yaml - key: configuration.yaml
path: configuration.yaml path: configuration.yaml
@@ -30,7 +30,7 @@ readOnly: true
type: "custom" type: "custom"
volumeSpec: volumeSpec:
secret: secret:
secretName: {{ include "common.names.fullname" . }}-secrets secretName: authelia-secrets
items: items:
- key: "JWT_TOKEN" - key: "JWT_TOKEN"
path: JWT_TOKEN path: JWT_TOKEN
+1 -1
View File
@@ -82,7 +82,7 @@ resources:
envFrom: envFrom:
- configMapRef: - configMapRef:
name: '{{ include "common.names.fullname" . }}-paths' name: authelia-paths
probes: probes:
liveness: liveness: