Commit Graph
13 Commits
Author SHA1 Message Date
Stavros KoisandGitHub 0a61958efa fix(authentik): use https://localhost:9443 for outposts (#3708) 2022-09-06 02:20:55 +03:00
Stavros KoisandGitHub e4b2e09d4e feat(authentik): make manual outpost much easier for both helm and scale gui (#3679)
* feat(authentik): some rework

* disable built in outposts as we aim to spin our own

* piping the proxy outpost

* use bootstrap token for outposts

* remove comments

* add some docs about the token

* set defaults for outposts with ability to override

* add some docs

* empty space

* add spaces for readability

* different ports for metrics

* add comments for metrics

* remove service from gui

* rename prots

* rearrange

* update ports to solve conflicts

* reenable outpost

* turn off outposts

* rearrange

* try previous image

* nop

* major bump

* add ingresses

* set default $host

* quote true

* test with outposts enabled

* update docs

* try only ldap outpost

* update docs

* expose services of outpost to gui and values

* update gui

* update docs

* disable outpost

* update default port type

* use the targetPort to set ports for metrics

* flexible ports everywhere

* change probe port

* update probe

* some quote fixes

* update probes

* update ports

* no message

* give worker more startup time

* more

* probes...

* dont quote ports

* lint

* rofs

* whoops

* quote

* see env

* extract listen ports from main config

* don't load listen_ports envs

* use default port

* try quoting  differently

* hardcode

* try more hardcoded change

* disable probes

* enable 1 probe

* another probe

* remove trailing slash?!

* again

* again

* test template

* give more time to probes

* more!?

* hmm

* see env vars

* I"M STUPID

* run

* last fixies

* see env

* disabel startup probe

* hmm

* enable readiness probe

* wth

* load env ..

* Aaaahh

* fix quotting

* start without worker

* delay worker startup

* enable worker

* try something better

* bash

* try again

* whoops

* dont chain

* oneliner

* one more try

* back to normal startup

* and default startup probe
2022-09-06 00:07:41 +03:00
Stavros KoisandGitHub 0635475600 Revert "feat(authentik): BREAKING CHANGE move to k8s integration inst… (#3678)
* Revert "feat(authentik): BREAKING CHANGE move to k8s integration instead of manual (#3673)"

This reverts commit b4af071a92.

* bump agian
2022-09-03 23:47:37 +03:00
Stavros KoisandGitHub b4af071a92 feat(authentik): BREAKING CHANGE move to k8s integration instead of manual (#3673)
* feat(authentik): move to k8s integration instead of manual

* bumpo

* update questiosn
2022-09-03 21:58:20 +03:00
Kjeld Schouten-Lebbing c5b2f8f13f chore(charts): add documentation checkbox/section to all SCALE Apps 2022-08-12 13:15:27 +02:00
16fbffb961 fix(templates): move extraArgs from .Values.controller to .Values (#3447)
* fix(templates): move extraArgs from .Values.controller to .Values

* update questions

* whoops

Co-authored-by: Kjeld Schouten-Lebbing <kjeld@schouten-lebbing.nl>
2022-08-12 10:40:46 +02:00
Stavros KoisandGitHub d5ea8234c1 fix(authentik): fix ldap outpost settings not showing, and make mail port an int (#3433) 2022-08-10 21:53:54 +00:00
Stavros KoisandGitHub 187da84006 fix(authentik): enable services/ports and disable geoip by default (#3424)
* fix(authentik): enable services/ports and disable geoip by default

* dedupe port names
2022-08-10 07:32:53 +00:00
Stavros KoisandGitHub 1920ecf582 feat(authentik): BREAKING CHANGE - Modularize it and add LDAP outpost (#3380)
* fix(authentik): make it modular and maintainable

* add volume mounts on worker

* move geoip to container instead of cron

* remove sercetkey from env and rename tpl

* add initial configmap and cleanup

* add rest of the config

* fix geoip

* add footer links config

* remove empty space

* finish with geoip config and ui

* update UI

* rename to error reporting

* Add ldap outpost

* add ldap healthcheck

* remove proxy reference

* geoip runs as root

* geoip issue for heathchecks

* add another todo

* Give full configuration options on service and move disable/enable login in tpl and add metrics endpoints

* change metrics ports of one of the containers to avoid conflicts

* whitespace

* add note

* add notes

* expose container ports for ldap

* correct ports

* Enable prometheus metrics for main container

* disable metrics when disabled

* not needed

* no message

* add name to container port,

* make note more clear

* don't micromanage services. let user do that

* lint

* define mail secrets only if defined

* handle better few secrets

* μορε

* whoops

* handle null

* quote "null"

* handle poteentialy empty strings

* handle empty string

* fix

* move ports to configmap

* move more to configmap

* hmm

* add placeholders to avoid empty secrets

* hmm

* hmm

* no message

* hmm?

* maybe?

* hmm

* damn

* b64enc all secrets

* quote again

* turn off geoip and ldap

* no rofs on worker

* rofs

* d

* test empty secret

* test footer links

* disable ldap for ci
2022-08-10 01:14:43 +03:00
ac9cc7f736 chore(questions): replace questions parts with templates (#3402)
* chore(questions): replace port parts with templates

* chore(questions): replace controller parts with templates

* remove tons of whitespce

* remove quotes from strings on templates

* make complete controller an include

* default to recreate

* remove replica and strategies as it's covered from controllerStrtegies include

* remove whitespace again

* replace controllertype with include (deployment/daemonset/statefulset)

* replace advanced port part except targetport

* remove more quotes

* add hidden toggle of enable the port

* new includes

* update build script

* controller deploy/stateful/deamon template changes

* replace controllerStrategies with replicas, replica#, strategy, recreate

* move 2 templates into a subfolder

* remove quotes

* remove disabled portals from questions and defined them on values

* remove enabled portal from the questions and add it on values

* one more app

* Portal cleanup

* remove portal templates

* add more includes

* replace portal links

* move some templates in folders

* replace ingressRoot with template

* more grouping

* replace persistenceroot with template

* replace serviceExpertRoot

* replace serviceroot

* fix a rogue one

* vctRoot

* securityContext cleanup

* remove quotes from templates on string

* replace vctRoot

* replace advanedSecurityRoot

* replace podsecurity root

* Update .github/scripts/build-catalog.sh

* Update values.yaml

* remove dupe portal

* update build-release script

* fix paths

* fix apps with imageSelector

Co-authored-by: Kjeld Schouten-Lebbing <kjeld@schouten-lebbing.nl>
2022-08-08 23:25:02 +02:00
Kjeld Schouten-LebbingandGitHub 5529c2a3af refactor(charts): BREAKING CHANGE (#2836)
* Update Apps with new Common version

* Patch with the secret fixes from common

* fix amd
2022-06-07 19:41:19 +02:00
Kjeld Schouten-Lebbing e4911cf0b1 chore(charts): sync all apps persistence configuration and always default to PVC 2022-06-05 17:07:34 +02:00
Stavros KoisandGitHub c843864fa5 feat(authentik): add authentik (#2535)
* feat(authentik): add authentik

* add secret

* try something crazy

* run geoip as a cronjob

* test

* whoops

* add gui options

* pin image

* add secret togui

* try http as main

* whops

* clear up

* clean
2022-04-22 21:44:57 +00:00