Compare commits

..

26 Commits

Author SHA1 Message Date
02a6cdd035 cosmetic(oidc-test): rename CM oidc-test to oidc-test-env 2023-12-11 11:19:25 +01:00
ad1c9d2bc3 feat: add oidc-test app component 2023-12-11 10:46:19 +01:00
ddbedf45ee fix(hydra-ldap): update werther secret name references 2023-12-11 10:46:19 +01:00
fec08c3d50 fix(hydra-ldap): update werther container port name 2023-12-11 10:46:19 +01:00
2db406470a feat(hydra-ldap): rename resources from werther to hydra-ldap 2023-12-11 10:46:19 +01:00
60af2f7a7f feat(werther): update image 2023-12-11 10:46:19 +01:00
d557eae1c2 feat(werther): adding a timeout for LDAP connection 2023-12-11 10:46:19 +01:00
d43645dcdd feat(component): adding werther 2023-12-11 10:46:19 +01:00
c24f40d45f Merge pull request 'Utilisations des images symfony-containers' (#2) from symfony-containers into develop
Reviewed-on: #2
2023-11-17 17:06:17 +01:00
93895720d9 feat(hydra-dispatcher): update image tag 2023-11-17 17:03:40 +01:00
c0865d9bf6 update hydra-dispatcher probes and image ref 2023-11-08 09:44:08 +01:00
87bbdcdd55 add probes 2023-11-08 09:44:08 +01:00
61cc316e1c add hydra-sql deployment 2023-11-08 09:44:08 +01:00
24b69b0146 fix(saml): fixing port name longer than 15c 2023-11-08 09:44:08 +01:00
62b63c2e87 feat(hydra-sql): adding new hydra login app 2023-11-08 09:43:46 +01:00
1cbfa69e70 set correct tag for hydra-oidc 2023-11-08 09:43:46 +01:00
56b8240e59 add imagepullpolicy rule 2023-11-08 09:43:46 +01:00
3a125101e1 remove loginapp default app configmap 2023-11-08 09:43:46 +01:00
738fa46970 update config default apps filename 2023-11-08 09:43:32 +01:00
ff2bd411ab set default configuration 2023-11-08 09:43:09 +01:00
1f24a92dc3 correciton config 2023-11-08 09:43:09 +01:00
6920de878e set hydra-oidc side container 2023-11-08 09:42:47 +01:00
aab1770988 set hydra-dispatcher side container 2023-11-08 09:42:47 +01:00
9e897057a3 set hydra-dispatcher side container 2023-11-08 09:42:47 +01:00
da756c5e07 set correct path for hydra-dispatcher conf 2023-11-08 09:42:47 +01:00
a21be87c46 Utilisation images symfony-containers 2023-11-08 09:42:47 +01:00
10 changed files with 24 additions and 81 deletions

View File

@ -29,7 +29,7 @@ vars:
fieldref: fieldref:
fieldpath: metadata.name fieldpath: metadata.name
patches: patchesJson6902:
- target: - target:
group: apps group: apps
version: v1 version: v1
@ -42,9 +42,3 @@ patches:
kind: Job kind: Job
name: hydra-migrate name: hydra-migrate
path: patches/hydra-migrate-job.yaml path: patches/hydra-migrate-job.yaml
- target:
group: batch
version: v1
kind: CronJob
name: hydra-janitor
path: patches/hydra-janitor-cronjob.yaml

View File

@ -1,21 +0,0 @@
- op: add
path: "/spec/jobTemplate/spec/template/spec/containers/0/env/-"
value:
name: HYDRA_DATABASE_USER
valueFrom:
secretKeyRef:
name: hydra-postgres-user
key: username
- op: add
path: "/spec/jobTemplate/spec/template/spec/containers/0/env/-"
value:
name: HYDRA_DATABASE_PASSWORD
valueFrom:
secretKeyRef:
name: hydra-postgres-user
key: password
- op: add
path: "/spec/jobTemplate/spec/template/spec/containers/0/env/-"
value:
name: DSN
value: "postgres://$(HYDRA_DATABASE_USER):$(HYDRA_DATABASE_PASSWORD)@$(HYDRA_DATABASE_SERVICE_NAME)-rw:5432/hydra?sslmode=disable"

View File

@ -2,12 +2,19 @@ apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization kind: Kustomization
resources: resources:
- ../../overlays/full - ../../overlays/base
- ./resources/ingress.yaml - ./resources/ingress.yaml
- ./resources/saml-idp.yaml - ./resources/saml-idp.yaml
- ./resources/self-signed-issuer.yaml - ./resources/self-signed-issuer.yaml
- ./resources/port-forwarder.yaml - ./resources/port-forwarder.yaml
components:
- ../../components/hydra-cnpg-database
- ../../components/oidc-test
#- ../../components/hydra-oidc
- ../../components/hydra-saml
patchesJson6902: patchesJson6902:
- target: - target:
version: v1 version: v1
@ -31,7 +38,7 @@ patchesJson6902:
path: patches/hydra-secret.yaml path: patches/hydra-secret.yaml
- target: - target:
version: v1 version: v1
kind: ConfigMap kind: Secret
name: oidc-test name: oidc-test
path: patches/oidc-test.yaml path: patches/oidc-test.yaml
- target: - target:

View File

@ -3,4 +3,4 @@
value: https://ssokustom/oauth2/callback value: https://ssokustom/oauth2/callback
- op: replace - op: replace
path: "/spec/postLogoutRedirectUris/0" path: "/spec/postLogoutRedirectUris/0"
value: https://ssokustom value: https://ssokustom/oauth2/callback

View File

@ -1,3 +1,6 @@
- op: replace
path: "/data/LOG_LEVEL"
value: 0
- op: replace - op: replace
path: "/data/OIDC_REDIRECT_URL" path: "/data/OIDC_REDIRECT_URL"
value: https://ssokustom/oauth2/callback value: https://ssokustom/oauth2/callback

View File

@ -1,5 +0,0 @@
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
resources:
- ./overlays/base

View File

@ -14,4 +14,3 @@ components:
- ../../components/hydra-oidc - ../../components/hydra-oidc
- ../../components/hydra-saml - ../../components/hydra-saml
- ../../components/hydra-sql - ../../components/hydra-sql
- ../../components/oidc-test

View File

@ -9,7 +9,6 @@ resources:
- ./resources/hydra-serviceaccount.yaml - ./resources/hydra-serviceaccount.yaml
- ./resources/hydra-migrate-job.yaml - ./resources/hydra-migrate-job.yaml
- ./resources/hydra-maester - ./resources/hydra-maester
- ./resources/hydra-janitor-cronjob.yaml
secretGenerator: secretGenerator:
- name: hydra-secret - name: hydra-secret

View File

@ -1,34 +0,0 @@
apiVersion: batch/v1
kind: CronJob
metadata:
name: hydra-janitor
labels:
app.kubernetes.io/name: hydra-janitor
spec:
concurrencyPolicy: Forbid
schedule: "0 */1 * * *"
jobTemplate:
spec:
template:
metadata:
labels:
app.kubernetes.io/name: hydra-janitor
spec:
restartPolicy: OnFailure
serviceAccountName: hydra-sa
containers:
- name: janitor
image: reg.cadoles.com/proxy_cache/oryd/hydra:v2.0.3
envFrom:
- configMapRef:
name: hydra-env
imagePullPolicy: IfNotPresent
command: ["hydra"]
env: []
args:
- janitor
- --read-from-env
- --grants
- --requests
- --tokens
resources: {}

View File

@ -2,13 +2,14 @@ apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization kind: Kustomization
resources: resources:
- ./resources/hydra-maester-deployment.yaml - ./resources/hydra-maester-deployment.yaml
- ./resources/hydra-maester-rbac.yaml - ./resources/hydra-maester-rbac.yaml
- https://raw.githubusercontent.com/ory/k8s/v0.28.2/helm/charts/hydra-maester/crds/crd-oauth2clients.yaml
configMapGenerator: configMapGenerator:
- name: hydra-maester-env - name: hydra-maester-env
literals: literals:
- APP_ENV=prod - APP_ENV=prod
- APP_DEBUG=false - APP_DEBUG=false
- HYDRA_ADMIN_BASE_URL=http://hydra - HYDRA_ADMIN_BASE_URL=http://hydra
- HYDRA_ADMIN_PORT=4445 - HYDRA_ADMIN_PORT=4445