2023-02-01 14:02:39 +01:00
|
|
|
apiVersion: kustomize.config.k8s.io/v1alpha1
|
|
|
|
|
kind: Component
|
|
|
|
|
|
|
|
|
|
resources:
|
2024-02-13 16:49:37 +01:00
|
|
|
- ./resources/hydra-oidc-deployment.yaml
|
|
|
|
|
- ./resources/hydra-oidc-service.yaml
|
2023-02-01 14:02:39 +01:00
|
|
|
|
2023-12-18 10:38:13 +01:00
|
|
|
generatorOptions:
|
|
|
|
|
labels:
|
2024-02-13 16:49:37 +01:00
|
|
|
com.cadoles.forge.sso-kustom/session: redis
|
2023-12-18 10:38:13 +01:00
|
|
|
|
2023-02-01 14:02:39 +01:00
|
|
|
configMapGenerator:
|
2024-02-13 16:49:37 +01:00
|
|
|
- name: hydra-oidc-env
|
|
|
|
|
literals:
|
|
|
|
|
- APP_ENV=prod
|
|
|
|
|
- APP_DEBUG=false
|
|
|
|
|
- PHP_FPM_MEMORY_LIMIT=256m
|
|
|
|
|
- NGINX_APP_SERVER_LISTEN=80
|
|
|
|
|
- HYDRA_ADMIN_BASE_URL=http://hydra-dispatcher
|
|
|
|
|
- OIC_AUTHORIZE_ENDPOINT=https://oidc-idp/api/v1/authorize
|
|
|
|
|
- OIDC_TOKEN_ENDPOINT=https://oidc-idp/api/v1/token
|
|
|
|
|
- OIDC_USERINFO_ENDPOINT=https://oidc-idp/api/v1/userinfo
|
|
|
|
|
- POST_LOGOUT_REDIRECT_URL=http://oidc-sp/logout
|
|
|
|
|
- OIDC_LOGOUT_ENDPOINT=https://oidc-idp/api/v1/logout?%s
|
|
|
|
|
- BASE_URL=http://hydra-oidc
|
|
|
|
|
- PARAMS_TO_DELETE=[]
|
|
|
|
|
- PARAMS_TO_INSERT={}
|
|
|
|
|
- OIDC_SCOPE=openid email
|
|
|
|
|
- CLIENT_ID_FC=MyClientID
|
|
|
|
|
- CLIENT_SECRET_FC=MyClientSecret
|
|
|
|
|
- COOKIE_PATH=/
|
|
|
|
|
- TRUSTED_PROXIES=127.0.0.1,REMOTE_ADDR
|
|
|
|
|
- REDIS_DSN="redis://redis:6379"
|
|
|
|
|
- HYDRA_DISPATCHER_OIDC_LOGIN_URL="http://hydra-oidc/login"
|
|
|
|
|
- HYDRA_DISPATCHER_OIDC_CONSENT_URL="http://hydra-oidc/consent"
|
|
|
|
|
- HYDRA_DISPATCHER_OIDC_LOGOUT_URL="http://hydra-oidc/logout"
|
