feat(altcha) #4543 : add altcha to hydra sql theme

components/hydra-oidc/kustomization.yaml

@@ -13,8 +13,8 @@ configMapGenerator:
 - name: hydra-oidc-env
   behavior: create
   literals:
-  - APP_ENV=dev
-  - APP_DEBUG=true
+  - APP_ENV=prod
+  - APP_DEBUG=false
   - PHP_FPM_MEMORY_LIMIT=256m
   - NGINX_APP_SERVER_LISTEN=80
   - HYDRA_ADMIN_BASE_URL=http://hydra-dispatcher

components/hydra-oidc/resources/hydra-oidc-deployment.yaml

@@ -46,7 +46,10 @@ spec:
           - configMapRef:
               name: hydra-oidc-env
         resources: {}
-
+        securityContext:
+          runAsNonRoot: true
+          runAsGroup: 1000
+          runAsUser: 1000
 
       - name: hydra-oidc-caddy
         image: reg.cadoles.com/cadoles/hydra-oidc-base:2024.4.2-develop.1349.c4711f6
@@ -92,5 +95,8 @@ spec:
           - name: CADDY_APP_ROOT_PUBLIC
             value: "/app/public/"
         resources: {}
-
+        securityContext:
+          runAsNonRoot: true
+          runAsGroup: 1000
+          runAsUser: 1000
       restartPolicy: Always

components/hydra-sql/kustomization.yaml

@@ -13,8 +13,6 @@ configMapGenerator:
 - name: hydra-sql-env
   behavior: create
   literals:
-  - APP_ENV=dev
-  - APP_DEBUG=true
   - ISSUER_URL="http://localhost:8000"
   - BASE_URL='http://localhost:8080'
   - HYDRA_ADMIN_BASE_URL='http://hydra:4445/admin'
@@ -26,6 +24,9 @@ configMapGenerator:
   - DB_PASSWORD="makeMeASecret"
   - REDIS_DSN="redis://redis:6379"
   - PEPPER="MakeMeABigSecret"
+  - ALTCHA_HOST=http://altcha:3333
+  - ALTCHA_BASE_URL=/altcha
+  - ALTCHA_ENABLED=true
 - name: sql-login-config
   files:
   - ./files/sql_login.yaml