authelia try to patch more db-like vars
This commit is contained in:
@@ -38,4 +38,4 @@ sources:
|
|||||||
- https://github.com/authelia/chartrepo
|
- https://github.com/authelia/chartrepo
|
||||||
- https://github.com/authelia/authelia
|
- https://github.com/authelia/authelia
|
||||||
type: application
|
type: application
|
||||||
version: 1.6.5
|
version: 1.6.6
|
||||||
|
|||||||
@@ -14,7 +14,7 @@ postgresql:
|
|||||||
enabled: true
|
enabled: true
|
||||||
postgresqlUsername: authelia
|
postgresqlUsername: authelia
|
||||||
postgresqlDatabase: authelia
|
postgresqlDatabase: authelia
|
||||||
existingSecret: "{{ .Release.Name }}-dbcreds"
|
existingSecret: dbcreds
|
||||||
persistence:
|
persistence:
|
||||||
db:
|
db:
|
||||||
storageClass: "SCALE-ZFS"
|
storageClass: "SCALE-ZFS"
|
||||||
@@ -42,7 +42,7 @@ redis:
|
|||||||
|
|
||||||
envFrom:
|
envFrom:
|
||||||
- configMapRef:
|
- configMapRef:
|
||||||
name: '{{ include "common.names.fullname" . }}-paths'
|
name: authelia-paths
|
||||||
|
|
||||||
probes:
|
probes:
|
||||||
liveness:
|
liveness:
|
||||||
|
|||||||
@@ -4,7 +4,7 @@
|
|||||||
apiVersion: v1
|
apiVersion: v1
|
||||||
kind: ConfigMap
|
kind: ConfigMap
|
||||||
metadata:
|
metadata:
|
||||||
name: {{ include "common.names.fullname" . }}-paths
|
name: authelia-paths
|
||||||
data:
|
data:
|
||||||
AUTHELIA_SERVER_DISABLE_HEALTHCHECK: "true"
|
AUTHELIA_SERVER_DISABLE_HEALTHCHECK: "true"
|
||||||
AUTHELIA_JWT_SECRET_FILE: "/secrets/JWT_TOKEN"
|
AUTHELIA_JWT_SECRET_FILE: "/secrets/JWT_TOKEN"
|
||||||
@@ -33,7 +33,7 @@ data:
|
|||||||
apiVersion: v1
|
apiVersion: v1
|
||||||
kind: ConfigMap
|
kind: ConfigMap
|
||||||
metadata:
|
metadata:
|
||||||
name: {{ include "common.names.fullname" . }}-configfile
|
name: authelia-configfile
|
||||||
data:
|
data:
|
||||||
configuration.yaml: |
|
configuration.yaml: |
|
||||||
---
|
---
|
||||||
|
|||||||
@@ -37,7 +37,9 @@ metadata:
|
|||||||
{{- $sentinelPass := "" }}
|
{{- $sentinelPass := "" }}
|
||||||
data:
|
data:
|
||||||
{{- if $redisprevious }}
|
{{- if $redisprevious }}
|
||||||
redis-password: {{ ( index $redisprevious.data "redis-password" ) }}
|
{{- $redisPass = ( index $redisprevious.data "redis-password" ) | b64dec }}
|
||||||
|
{{- $sentinelPass = ( index $redisprevious.data "redis-password" ) | b64dec }}
|
||||||
|
redis-password: {{ ( index $redisprevious.data "sentinel-password" ) }}
|
||||||
sentinel-password: {{ ( index $redisprevious.data "sentinel-password" ) }}
|
sentinel-password: {{ ( index $redisprevious.data "sentinel-password" ) }}
|
||||||
{{- else }}
|
{{- else }}
|
||||||
{{- $redisPass = randAlphaNum 50 }}
|
{{- $redisPass = randAlphaNum 50 }}
|
||||||
@@ -46,7 +48,7 @@ data:
|
|||||||
sentinel-password: {{ $sentinelPass | b64enc | quote }}
|
sentinel-password: {{ $sentinelPass | b64enc | quote }}
|
||||||
{{- end }}
|
{{- end }}
|
||||||
masterhost: {{ ( printf "%v-%v" .Release.Name "redis-master" ) | b64enc | quote }}
|
masterhost: {{ ( printf "%v-%v" .Release.Name "redis-master" ) | b64enc | quote }}
|
||||||
slavehost: {{ ( printf "%v-%v" .Release.Name "redis-master" ) | b64enc | quote }}
|
slavehost: {{ ( printf "%v-%v" .Release.Name "redis-slave" ) | b64enc | quote }}
|
||||||
type: Opaque
|
type: Opaque
|
||||||
|
|
||||||
|
|
||||||
@@ -56,8 +58,8 @@ apiVersion: v1
|
|||||||
kind: Secret
|
kind: Secret
|
||||||
type: Opaque
|
type: Opaque
|
||||||
metadata:
|
metadata:
|
||||||
name: {{ include "common.names.fullname" . }}-secrets
|
name: authelia-secrets
|
||||||
{{- $autheliaprevious := lookup "v1" "Secret" .Release.Namespace ( ( printf "%v-%v" ( ( include "common.names.fullname" . ) | quote ) "-secrets" ) | quote ) }}
|
{{- $autheliaprevious := lookup "v1" "Secret" .Release.Namespace "authelia-secrets" }}
|
||||||
{{- $oidckey := "" }}
|
{{- $oidckey := "" }}
|
||||||
{{- $oidcsecret := "" }}
|
{{- $oidcsecret := "" }}
|
||||||
{{- $jwtsecret := "" }}
|
{{- $jwtsecret := "" }}
|
||||||
@@ -72,20 +74,25 @@ data:
|
|||||||
SESSION_ENCRYPTION_KEY: {{ $jwtsecret | b64enc | quote }}
|
SESSION_ENCRYPTION_KEY: {{ $jwtsecret | b64enc | quote }}
|
||||||
JWT_TOKEN: {{ $jwtsecret | b64enc | quote }}
|
JWT_TOKEN: {{ $jwtsecret | b64enc | quote }}
|
||||||
{{- end }}
|
{{- end }}
|
||||||
|
|
||||||
{{- if .Values.authentication_backend.ldap.enabled }}
|
{{- if .Values.authentication_backend.ldap.enabled }}
|
||||||
LDAP_PASSWORD: {{ .Values.authentication_backend.ldap.plain_password }}
|
LDAP_PASSWORD: {{ .Values.authentication_backend.ldap.plain_password }}
|
||||||
{{- end }}
|
{{- end }}
|
||||||
|
|
||||||
{{- if .Values.notifier.smtp.enabled }}
|
{{- if .Values.notifier.smtp.enabled }}
|
||||||
SMTP_PASSWORD: {{ .Values.notifier.smtp.plain_password }}
|
SMTP_PASSWORD: {{ .Values.notifier.smtp.plain_password }}
|
||||||
{{- end }}
|
{{- end }}
|
||||||
|
|
||||||
{{- if .Values.duo_api.enabled }}
|
{{- if .Values.duo_api.enabled }}
|
||||||
DUO_API_KEY: {{ .Values.duo_api.plain_api_key | b64enc }}
|
DUO_API_KEY: {{ .Values.duo_api.plain_api_key | b64enc }}
|
||||||
{{- end }}
|
{{- end }}
|
||||||
|
|
||||||
{{- if $dbprevious }}
|
{{- if $dbprevious }}
|
||||||
STORAGE_PASSWORD: {{ ( index $dbprevious.data "postgresql-password" ) }}
|
STORAGE_PASSWORD: {{ ( index $dbprevious.data "postgresql-password" ) }}
|
||||||
{{- else }}
|
{{- else }}
|
||||||
STORAGE_PASSWORD: {{ $dbPass | b64enc | quote }}
|
STORAGE_PASSWORD: {{ $dbPass | b64enc | quote }}
|
||||||
{{- end }}
|
{{- end }}
|
||||||
|
|
||||||
{{- if $redisprevious }}
|
{{- if $redisprevious }}
|
||||||
REDIS_PASSWORD: {{ ( index $redisprevious.data "redis-password" ) }}
|
REDIS_PASSWORD: {{ ( index $redisprevious.data "redis-password" ) }}
|
||||||
{{- if .Values.redisProvider.high_availability.enabled}}
|
{{- if .Values.redisProvider.high_availability.enabled}}
|
||||||
@@ -97,6 +104,7 @@ data:
|
|||||||
REDIS_SENTINEL_PASSWORD: {{ $sentinelPass | b64enc | quote }}
|
REDIS_SENTINEL_PASSWORD: {{ $sentinelPass | b64enc | quote }}
|
||||||
{{- end }}
|
{{- end }}
|
||||||
{{- end }}
|
{{- end }}
|
||||||
|
|
||||||
{{- if .Values.identity_providers.oidc.enabled }}
|
{{- if .Values.identity_providers.oidc.enabled }}
|
||||||
{{- if $autheliaprevious }}
|
{{- if $autheliaprevious }}
|
||||||
OIDC_PRIVATE_KEY: {{ index $autheliaprevious.data "OIDC_PRIVATE_KEY" }}
|
OIDC_PRIVATE_KEY: {{ index $autheliaprevious.data "OIDC_PRIVATE_KEY" }}
|
||||||
|
|||||||
@@ -16,7 +16,7 @@ subPath: configuration.yaml
|
|||||||
type: "custom"
|
type: "custom"
|
||||||
volumeSpec:
|
volumeSpec:
|
||||||
configMap:
|
configMap:
|
||||||
name: {{ include "common.names.fullname" . }}-configfile
|
name: authelia-configfile
|
||||||
items:
|
items:
|
||||||
- key: configuration.yaml
|
- key: configuration.yaml
|
||||||
path: configuration.yaml
|
path: configuration.yaml
|
||||||
@@ -30,7 +30,7 @@ readOnly: true
|
|||||||
type: "custom"
|
type: "custom"
|
||||||
volumeSpec:
|
volumeSpec:
|
||||||
secret:
|
secret:
|
||||||
secretName: {{ include "common.names.fullname" . }}-secrets
|
secretName: authelia-secrets
|
||||||
items:
|
items:
|
||||||
- key: "JWT_TOKEN"
|
- key: "JWT_TOKEN"
|
||||||
path: JWT_TOKEN
|
path: JWT_TOKEN
|
||||||
|
|||||||
@@ -82,7 +82,7 @@ resources:
|
|||||||
|
|
||||||
envFrom:
|
envFrom:
|
||||||
- configMapRef:
|
- configMapRef:
|
||||||
name: '{{ include "common.names.fullname" . }}-paths'
|
name: authelia-paths
|
||||||
|
|
||||||
probes:
|
probes:
|
||||||
liveness:
|
liveness:
|
||||||
|
|||||||
Reference in New Issue
Block a user