Compare commits

..

26 Commits

Author SHA1 Message Date
02a6cdd035 cosmetic(oidc-test): rename CM oidc-test to oidc-test-env 2023-12-11 11:19:25 +01:00
ad1c9d2bc3 feat: add oidc-test app component 2023-12-11 10:46:19 +01:00
ddbedf45ee fix(hydra-ldap): update werther secret name references 2023-12-11 10:46:19 +01:00
fec08c3d50 fix(hydra-ldap): update werther container port name 2023-12-11 10:46:19 +01:00
2db406470a feat(hydra-ldap): rename resources from werther to hydra-ldap 2023-12-11 10:46:19 +01:00
60af2f7a7f feat(werther): update image 2023-12-11 10:46:19 +01:00
d557eae1c2 feat(werther): adding a timeout for LDAP connection 2023-12-11 10:46:19 +01:00
d43645dcdd feat(component): adding werther 2023-12-11 10:46:19 +01:00
c24f40d45f Merge pull request 'Utilisations des images symfony-containers' (#2) from symfony-containers into develop
Reviewed-on: #2
2023-11-17 17:06:17 +01:00
93895720d9 feat(hydra-dispatcher): update image tag 2023-11-17 17:03:40 +01:00
c0865d9bf6 update hydra-dispatcher probes and image ref 2023-11-08 09:44:08 +01:00
87bbdcdd55 add probes 2023-11-08 09:44:08 +01:00
61cc316e1c add hydra-sql deployment 2023-11-08 09:44:08 +01:00
24b69b0146 fix(saml): fixing port name longer than 15c 2023-11-08 09:44:08 +01:00
62b63c2e87 feat(hydra-sql): adding new hydra login app 2023-11-08 09:43:46 +01:00
1cbfa69e70 set correct tag for hydra-oidc 2023-11-08 09:43:46 +01:00
56b8240e59 add imagepullpolicy rule 2023-11-08 09:43:46 +01:00
3a125101e1 remove loginapp default app configmap 2023-11-08 09:43:46 +01:00
738fa46970 update config default apps filename 2023-11-08 09:43:32 +01:00
ff2bd411ab set default configuration 2023-11-08 09:43:09 +01:00
1f24a92dc3 correciton config 2023-11-08 09:43:09 +01:00
6920de878e set hydra-oidc side container 2023-11-08 09:42:47 +01:00
aab1770988 set hydra-dispatcher side container 2023-11-08 09:42:47 +01:00
9e897057a3 set hydra-dispatcher side container 2023-11-08 09:42:47 +01:00
da756c5e07 set correct path for hydra-dispatcher conf 2023-11-08 09:42:47 +01:00
a21be87c46 Utilisation images symfony-containers 2023-11-08 09:42:47 +01:00
13 changed files with 18 additions and 106 deletions

View File

@ -29,7 +29,7 @@ vars:
fieldref:
fieldpath: metadata.name
patches:
patchesJson6902:
- target:
group: apps
version: v1
@ -42,9 +42,3 @@ patches:
kind: Job
name: hydra-migrate
path: patches/hydra-migrate-job.yaml
- target:
group: batch
version: v1
kind: CronJob
name: hydra-janitor
path: patches/hydra-janitor-cronjob.yaml

View File

@ -1,21 +0,0 @@
- op: add
path: "/spec/jobTemplate/spec/template/spec/containers/0/env/-"
value:
name: HYDRA_DATABASE_USER
valueFrom:
secretKeyRef:
name: hydra-postgres-user
key: username
- op: add
path: "/spec/jobTemplate/spec/template/spec/containers/0/env/-"
value:
name: HYDRA_DATABASE_PASSWORD
valueFrom:
secretKeyRef:
name: hydra-postgres-user
key: password
- op: add
path: "/spec/jobTemplate/spec/template/spec/containers/0/env/-"
value:
name: DSN
value: "postgres://$(HYDRA_DATABASE_USER):$(HYDRA_DATABASE_PASSWORD)@$(HYDRA_DATABASE_SERVICE_NAME)-rw:5432/hydra?sslmode=disable"

View File

@ -7,7 +7,7 @@ resources:
- ./resources/oauth2-client.yaml
configMapGenerator:
- name: oidc-test
- name: oidc-test-env
literals:
- LOG_LEVEL=0
- HTTP_ADDRESS=0.0.0.0:8080

View File

@ -24,7 +24,7 @@ spec:
resources: {}
envFrom:
- configMapRef:
name: oidc-test
name: oidc-test-env
env:
- name: OIDC_CLIENT_ID
valueFrom:

View File

@ -2,12 +2,19 @@ apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
resources:
- ../../overlays/full
- ../../overlays/base
- ./resources/ingress.yaml
- ./resources/saml-idp.yaml
- ./resources/self-signed-issuer.yaml
- ./resources/port-forwarder.yaml
components:
- ../../components/hydra-cnpg-database
- ../../components/oidc-test
#- ../../components/hydra-oidc
- ../../components/hydra-saml
patchesJson6902:
- target:
version: v1
@ -31,7 +38,7 @@ patchesJson6902:
path: patches/hydra-secret.yaml
- target:
version: v1
kind: ConfigMap
kind: Secret
name: oidc-test
path: patches/oidc-test.yaml
- target:

View File

@ -3,4 +3,4 @@
value: https://ssokustom/oauth2/callback
- op: replace
path: "/spec/postLogoutRedirectUris/0"
value: https://ssokustom
value: https://ssokustom/oauth2/callback

View File

@ -1,3 +1,6 @@
- op: replace
path: "/data/LOG_LEVEL"
value: 0
- op: replace
path: "/data/OIDC_REDIRECT_URL"
value: https://ssokustom/oauth2/callback

View File

@ -1,5 +0,0 @@
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
resources:
- ./overlays/base

View File

@ -13,5 +13,4 @@ components:
- ../../components/hydra-cnpg-database
- ../../components/hydra-oidc
- ../../components/hydra-saml
- ../../components/hydra-sql
- ../../components/oidc-test
- ../../components/hydra-sql

View File

@ -9,8 +9,6 @@ resources:
- ./resources/hydra-serviceaccount.yaml
- ./resources/hydra-migrate-job.yaml
- ./resources/hydra-maester
- ./resources/hydra-janitor-cronjob.yaml
- ./resources/hydra-hpa.yaml
secretGenerator:
- name: hydra-secret

View File

@ -55,9 +55,6 @@ spec:
name: hydra-public
- containerPort: 4445
name: hydra-admin
resources:
requests:
cpu: 100m
memory: 128Mi
resources: {}
restartPolicy: Always

View File

@ -1,26 +0,0 @@
apiVersion: autoscaling/v2
kind: HorizontalPodAutoscaler
metadata:
name: hydra
labels:
io.kompose.service: hydra
spec:
scaleTargetRef:
apiVersion: apps/v1
kind: Deployment
name: hydra
minReplicas: 1
maxReplicas: 3
metrics:
- type: Resource
resource:
name: memory
target:
type: Utilization
averageUtilization: 80
- type: Resource
resource:
name: cpu
target:
type: Utilization
averageUtilization: 80

View File

@ -1,34 +0,0 @@
apiVersion: batch/v1
kind: CronJob
metadata:
name: hydra-janitor
labels:
app.kubernetes.io/name: hydra-janitor
spec:
concurrencyPolicy: Forbid
schedule: "0 */1 * * *"
jobTemplate:
spec:
template:
metadata:
labels:
app.kubernetes.io/name: hydra-janitor
spec:
restartPolicy: OnFailure
serviceAccountName: hydra-sa
containers:
- name: janitor
image: reg.cadoles.com/proxy_cache/oryd/hydra:v2.0.3
envFrom:
- configMapRef:
name: hydra-env
imagePullPolicy: IfNotPresent
command: ["hydra"]
env: []
args:
- janitor
- --read-from-env
- --grants
- --requests
- --tokens
resources: {}