Compare commits
4 Commits
Author | SHA1 | Date |
---|---|---|
Philippe Caseiro | 320d494e8d | |
Philippe Caseiro | 1c5eb098f8 | |
Philippe Caseiro | 3aedee1f9f | |
Philippe Caseiro | c184fc6b9c |
|
@ -17,23 +17,23 @@ spec:
|
||||||
app.kubernetes.io/name: oidc-test
|
app.kubernetes.io/name: oidc-test
|
||||||
spec:
|
spec:
|
||||||
containers:
|
containers:
|
||||||
- image: reg.cadoles.com/cadoles/oidc-test:2023.12.6-stable.1502.ebfd504
|
- image: reg.cadoles.com/cadoles/oidc-test:2023.12.6-stable.1502.ebfd504
|
||||||
name: oidc-test
|
name: oidc-test
|
||||||
ports:
|
ports:
|
||||||
- containerPort: 8080
|
- containerPort: 8080
|
||||||
resources: {}
|
resources: {}
|
||||||
envFrom:
|
envFrom:
|
||||||
- configMapRef:
|
- configMapRef:
|
||||||
name: oidc-test-env
|
name: oidc-test-env
|
||||||
env:
|
env:
|
||||||
- name: OIDC_CLIENT_ID
|
- name: OIDC_CLIENT_ID
|
||||||
valueFrom:
|
valueFrom:
|
||||||
secretKeyRef:
|
secretKeyRef:
|
||||||
name: oidc-test-oauth2-client
|
name: oidc-test-oauth2-client
|
||||||
key: client_id
|
key: CLIENT_ID
|
||||||
- name: OIDC_CLIENT_SECRET
|
- name: OIDC_CLIENT_SECRET
|
||||||
valueFrom:
|
valueFrom:
|
||||||
secretKeyRef:
|
secretKeyRef:
|
||||||
name: oidc-test-oauth2-client
|
name: oidc-test-oauth2-client
|
||||||
key: client_secret
|
key: CLIENT_SECRET
|
||||||
restartPolicy: Always
|
restartPolicy: Always
|
||||||
|
|
|
@ -2,14 +2,14 @@ apiVersion: kustomize.config.k8s.io/v1beta1
|
||||||
kind: Kustomization
|
kind: Kustomization
|
||||||
|
|
||||||
resources:
|
resources:
|
||||||
- ./resources/hydra-maester-deployment.yaml
|
- ./resources/hydra-maester-deployment.yaml
|
||||||
- ./resources/hydra-maester-rbac.yaml
|
- ./resources/hydra-maester-rbac.yaml
|
||||||
- https://raw.githubusercontent.com/ory/k8s/v0.28.2/helm/charts/hydra-maester/crds/crd-oauth2clients.yaml
|
#- https://raw.githubusercontent.com/ory/k8s/v0.28.2/helm/charts/hydra-maester/crds/crd-oauth2clients.yaml
|
||||||
|
|
||||||
configMapGenerator:
|
configMapGenerator:
|
||||||
- name: hydra-maester-env
|
- name: hydra-maester-env
|
||||||
literals:
|
literals:
|
||||||
- APP_ENV=prod
|
- APP_ENV=prod
|
||||||
- APP_DEBUG=false
|
- APP_DEBUG=false
|
||||||
- HYDRA_ADMIN_BASE_URL=http://hydra
|
- HYDRA_ADMIN_BASE_URL=http://hydra
|
||||||
- HYDRA_ADMIN_PORT=4445
|
- HYDRA_ADMIN_PORT=4445
|
||||||
|
|
|
@ -1,4 +1,3 @@
|
||||||
---
|
|
||||||
# Source: hydra/charts/hydra-maester/templates/deployment.yaml
|
# Source: hydra/charts/hydra-maester/templates/deployment.yaml
|
||||||
apiVersion: apps/v1
|
apiVersion: apps/v1
|
||||||
kind: Deployment
|
kind: Deployment
|
||||||
|
@ -7,7 +6,7 @@ metadata:
|
||||||
labels:
|
labels:
|
||||||
app.kubernetes.io/name: hydra-maester
|
app.kubernetes.io/name: hydra-maester
|
||||||
app.kubernetes.io/instance: hydra-master
|
app.kubernetes.io/instance: hydra-master
|
||||||
app.kubernetes.io/version: "v0.0.23"
|
app.kubernetes.io/version: "v0.0.32"
|
||||||
spec:
|
spec:
|
||||||
replicas: 1
|
replicas: 1
|
||||||
revisionHistoryLimit: 10
|
revisionHistoryLimit: 10
|
||||||
|
@ -25,32 +24,31 @@ spec:
|
||||||
annotations:
|
annotations:
|
||||||
spec:
|
spec:
|
||||||
containers:
|
containers:
|
||||||
- name: hydra-maester
|
- name: hydra-maester
|
||||||
image: reg.cadoles.com/proxy_cache/oryd/hydra-maester:v0.0.25
|
image: reg.cadoles.com/proxy_cache/oryd/hydra-maester:v0.0.32-amd64
|
||||||
imagePullPolicy: IfNotPresent
|
imagePullPolicy: IfNotPresent
|
||||||
envFrom:
|
envFrom:
|
||||||
- configMapRef:
|
- configMapRef:
|
||||||
name: hydra-maester-env
|
name: hydra-maester-env
|
||||||
command:
|
command:
|
||||||
- /manager
|
- /manager
|
||||||
args:
|
args:
|
||||||
- --metrics-addr=127.0.0.1:8080
|
- --metrics-addr=127.0.0.1:8080
|
||||||
- --hydra-url=$(HYDRA_ADMIN_BASE_URL)
|
- --hydra-url=$(HYDRA_ADMIN_BASE_URL)
|
||||||
- --hydra-port=$(HYDRA_ADMIN_PORT)
|
- --hydra-port=$(HYDRA_ADMIN_PORT)
|
||||||
- --endpoint=/admin/clients
|
- --endpoint=/admin/clients
|
||||||
resources:
|
resources: {}
|
||||||
{}
|
terminationMessagePath: /dev/termination-log
|
||||||
terminationMessagePath: /dev/termination-log
|
terminationMessagePolicy: File
|
||||||
terminationMessagePolicy: File
|
securityContext:
|
||||||
securityContext:
|
allowPrivilegeEscalation: false
|
||||||
allowPrivilegeEscalation: false
|
capabilities:
|
||||||
capabilities:
|
drop:
|
||||||
drop:
|
- ALL
|
||||||
- ALL
|
privileged: false
|
||||||
privileged: false
|
readOnlyRootFilesystem: true
|
||||||
readOnlyRootFilesystem: true
|
runAsNonRoot: true
|
||||||
runAsNonRoot: true
|
runAsUser: 1000
|
||||||
runAsUser: 1000
|
|
||||||
serviceAccountName: hydra-maester-account
|
serviceAccountName: hydra-maester-account
|
||||||
automountServiceAccountToken: true
|
automountServiceAccountToken: true
|
||||||
nodeSelector:
|
nodeSelector:
|
||||||
|
|
Loading…
Reference in New Issue