feat: proxy bootstrapping from configuration

misc/k8s/kustomization/base/resources/bouncer-admin/files/config.yml

@@ -4,19 +4,19 @@ admin:
     port: 8081
   cors:
     allowedOrigins:
-    - http://localhost:3001
+      - http://localhost:3001
     allowCredentials: true
     allowMethods:
-    - POST
-    - GET
-    - PUT
-    - DELETE
+      - POST
+      - GET
+      - PUT
+      - DELETE
     allowedHeaders:
-    - Origin
-    - Accept
-    - Content-Type
-    - Authorization
-    - Sentry-Trace
+      - Origin
+      - Accept
+      - Content-Type
+      - Authorization
+      - Sentry-Trace
     debug: false
   auth:
     issuer: http://127.0.0.1:8081
@@ -28,9 +28,13 @@ admin:
 
 redis:
   addresses:
-  - rfs-bouncer-redis:${RFS_BOUNCER_REDIS_SERVICE_PORT}
+    - rfs-bouncer-redis:${RFS_BOUNCER_REDIS_SERVICE_PORT}
   master: mymaster
 
 logger:
-  level: 2
+  level: ${BOUNCER_LOG_LEVEL}
   format: human
+
+bootstrap:
+  dir: /etc/bouncer/bootstrap.d
+  lockTimeout: 30s

misc/k8s/kustomization/base/resources/bouncer-admin/kustomization.yaml

@@ -2,11 +2,15 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 
 resources:
-- ./resources/service.yaml
-- ./resources/deployment.yaml
+  - ./resources/service.yaml
+  - ./resources/deployment.yaml
 
 configMapGenerator:
-- name: bouncer-admin-config
-  files:
-  - ./files/config.yml
-  - ./files/admin-key.json
+  - name: bouncer-admin-config
+    files:
+      - ./files/config.yml
+      - ./files/admin-key.json
+  - name: bouncer-admin-bootstrap
+  - name: bouncer-admin-env
+    literals:
+      - BOUNCER_LOG_LEVEL=2

misc/k8s/kustomization/base/resources/bouncer-admin/resources/deployment.yaml

@@ -17,18 +17,35 @@ spec:
         io.kompose.service: bouncer-admin
     spec:
       containers:
-      - name: bouncer-admin
-        image: reg.cadoles.com/cadoles/bouncer:v2024.2.5-1602626
-        command: ["bouncer", "--debug", "-c", "/etc/bouncer/config.yml", "server", "admin", "run"]
-        imagePullPolicy: Always
-        resources: {}
-        ports:
         - name: bouncer-admin
-          containerPort: 8081
-        volumeMounts:
-        - mountPath: /etc/bouncer/
-          name: bouncer-admin-config
+          image: bouncer
+          command:
+            [
+              "bouncer",
+              "--debug",
+              "-c",
+              "/etc/bouncer/config.yml",
+              "server",
+              "admin",
+              "run",
+            ]
+          imagePullPolicy: Always
+          resources: {}
+          ports:
+            - name: bouncer-admin
+              containerPort: 8081
+          envFrom:
+            - configMapRef:
+                name: bouncer-admin-env
+          volumeMounts:
+            - mountPath: /etc/bouncer/
+              name: bouncer-admin-config
+            - mountPath: /etc/bouncer/bootstrap.d
+              name: bouncer-admin-bootstrap
       volumes:
-      - name: bouncer-admin-config
-        configMap:
-          name: bouncer-admin-config
+        - name: bouncer-admin-config
+          configMap:
+            name: bouncer-admin-config
+        - name: bouncer-admin-bootstrap
+          configMap:
+            name: bouncer-admin-bootstrap