Compare commits

...

12 Commits

Author SHA1 Message Date
380a116fa8 fix(all): use app.kubernetes.io/name label instead of io.kompose.service 2024-02-21 15:43:42 +01:00
72a9932fc5 fix(hydra): update hydra-maester version to 0.0.32-amd64 2024-02-14 11:30:54 +01:00
1060fdf4be fix(hydra): update hydra-maester version to 0.0.32 2024-02-14 11:07:47 +01:00
45953d5531 fix(hydra): update hydra version to 2.1.2 2024-02-14 11:06:36 +01:00
29f539f7ab fix(oidc): removing deprecated and useless patch
fix container liveness and readyness probes
fix service with correct port
2024-02-13 16:49:37 +01:00
0084707bbc fix(dispatcher): dispatcher service must use containerport 2024-02-13 15:56:10 +01:00
0dbd5dd551 fix(dispatcher): liveness probe must use the container port
Container port is 8080 so ... the probes must use the same port
2024-02-12 11:46:07 +01:00
f1d621d4a9 fix(maester): CRD must be installed cluster wide 2024-02-12 11:42:35 +01:00
83b81b1056 Revert "fix(resources): do not set namespace in maester rolebinding"
This reverts commit 1fccf5f8dc.
2024-01-30 12:34:54 +01:00
1fccf5f8dc fix(resources): do not set namespace in maester rolebinding 2024-01-30 12:27:50 +01:00
907618902e fix(resources): oauth2client CRD must be installed clusterwide 2024-01-30 12:21:13 +01:00
6b1702b7ed fix(component): do not specify namespace for werther component 2024-01-30 10:42:56 +01:00
18 changed files with 204 additions and 217 deletions

View File

@ -2,7 +2,6 @@ apiVersion: apps/v1
kind: Deployment
metadata:
name: hydra-ldap
namespace: default
labels:
app.kubernetes.io/name: hydra-ldap
app.kubernetes.io/version: "v1.2.2"

View File

@ -2,7 +2,7 @@ apiVersion: v1
kind: Service
metadata:
labels:
io.kompose.service: hydra-ldap
app.kubernetes.io/name: hydra-ldap
name: hydra-ldap
spec:
type: ClusterIP

View File

@ -31,14 +31,6 @@ configMapGenerator:
- COOKIE_PATH=/
- TRUSTED_PROXIES=127.0.0.1,REMOTE_ADDR
- REDIS_DSN="redis://redis:6379"
# - name: hydra-dispatcher-apps
# behavior: merge
# files:
# - apps.yaml=./files/hydra/oidc.yaml
patchesJson6902:
- target:
version: v1
kind: ConfigMap
name: hydra-oidc-env
path: patches/hydra-oidc-env.yaml
- HYDRA_DISPATCHER_OIDC_LOGIN_URL="http://hydra-oidc/login"
- HYDRA_DISPATCHER_OIDC_CONSENT_URL="http://hydra-oidc/consent"
- HYDRA_DISPATCHER_OIDC_LOGOUT_URL="http://hydra-oidc/logout"

View File

@ -1,9 +0,0 @@
- op: replace
path: "/data/HYDRA_DISPATCHER_OIDC_LOGIN_URL"
value: http://hydra-oidc/login
- op: replace
path: "/data/HYDRA_DISPATCHER_OIDC_CONSENT_URL"
value: http://hydra-oidc/consent
- op: replace
path: "/data/HYDRA_DISPATCHER_OIDC_LOGOUT_URL"
value: http://hydra-oidc/logout

View File

@ -2,19 +2,19 @@ apiVersion: apps/v1
kind: Deployment
metadata:
labels:
io.kompose.service: hydra-oidc
app.kubernetes.io/name: hydra-oidc
name: hydra-oidc
spec:
replicas: 1
selector:
matchLabels:
io.kompose.service: hydra-oidc
app.kubernetes.io/name: hydra-oidc
strategy:
type: Recreate
template:
metadata:
labels:
io.kompose.service: hydra-oidc
app.kubernetes.io/name: hydra-oidc
spec:
containers:
- name: hydra-oidc-php-fpm
@ -54,14 +54,14 @@ spec:
readinessProbe:
httpGet:
path: /healthy
port: 80
port: 8080
initialDelaySeconds: 5
timeoutSeconds: 5
periodSeconds: 10
livenessProbe:
httpGet:
path: /healthy
port: 80
port: 8080
initialDelaySeconds: 15
timeoutSeconds: 5
periodSeconds: 15

View File

@ -2,13 +2,13 @@ apiVersion: v1
kind: Service
metadata:
labels:
io.kompose.service: hydra-oidc
app.kubernetes.io/name: hydra-oidc
name: hydra-oidc
spec:
ports:
- name: hydra-oidc
port: 80
port: 8080
selector:
io.kompose.service: hydra-oidc
app.kubernetes.io/name: hydra-oidc
status:
loadBalancer: {}

View File

@ -2,19 +2,19 @@ apiVersion: apps/v1
kind: Deployment
metadata:
labels:
io.kompose.service: hydra-saml-remote-user
app.kubernetes.io/name: hydra-saml-remote-user
name: hydra-saml-remote-user
spec:
replicas: 1
selector:
matchLabels:
io.kompose.service: hydra-saml-remote-user
app.kubernetes.io/name: hydra-saml-remote-user
strategy:
type: Recreate
template:
metadata:
labels:
io.kompose.service: hydra-saml-remote-user
app.kubernetes.io/name: hydra-saml-remote-user
spec:
containers:
- name: hydra-saml-remote-user
@ -31,7 +31,7 @@ apiVersion: v1
kind: Service
metadata:
labels:
io.kompose.service: hydra-saml-remote-user
app.kubernetes.io/name: hydra-saml-remote-user
name: hydra-saml-remote-user
spec:
ports:
@ -39,6 +39,6 @@ spec:
port: 80
targetPort: 8080
selector:
io.kompose.service: hydra-saml-remote-user
app.kubernetes.io/name: hydra-saml-remote-user
status:
loadBalancer: {}

View File

@ -2,19 +2,19 @@ apiVersion: apps/v1
kind: Deployment
metadata:
labels:
io.kompose.service: hydra-saml-shibboleth-sp
app.kubernetes.io/name: hydra-saml-shibboleth-sp
name: hydra-saml-shibboleth-sp
spec:
replicas: 1
selector:
matchLabels:
io.kompose.service: hydra-saml-shibboleth-sp
app.kubernetes.io/name: hydra-saml-shibboleth-sp
strategy:
type: Recreate
template:
metadata:
labels:
io.kompose.service: hydra-saml-shibboleth-sp
app.kubernetes.io/name: hydra-saml-shibboleth-sp
spec:
securityContext:
fsGroup: 102
@ -41,14 +41,14 @@ apiVersion: v1
kind: Service
metadata:
labels:
io.kompose.service: hydra-saml
app.kubernetes.io/name: hydra-saml
name: hydra-saml
spec:
ports:
- name: http
port: 80
selector:
io.kompose.service: hydra-saml-shibboleth-sp
app.kubernetes.io/name: hydra-saml-shibboleth-sp
status:
loadBalancer: {}

View File

@ -2,19 +2,19 @@ apiVersion: apps/v1
kind: Deployment
metadata:
labels:
io.kompose.service: hydra-sql
app.kubernetes.io/name: hydra-sql
name: hydra-sql
spec:
replicas: 1
selector:
matchLabels:
io.kompose.service: hydra-sql
app.kubernetes.io/name: hydra-sql
strategy:
type: Recreate
template:
metadata:
labels:
io.kompose.service: hydra-sql
app.kubernetes.io/name: hydra-sql
spec:
containers:
- name: hydra-sql-fpm

View File

@ -2,13 +2,13 @@ apiVersion: v1
kind: Service
metadata:
labels:
io.kompose.service: hydra-sql
app.kubernetes.io/name: hydra-sql
name: hydra-sql
spec:
ports:
- name: hydra-sql
port: 8080
selector:
io.kompose.service: hydra-sql
app.kubernetes.io/name: hydra-sql
status:
loadBalancer: {}

View File

@ -2,19 +2,19 @@ apiVersion: apps/v1
kind: Deployment
metadata:
labels:
io.kompose.service: port-forwarder
app.kubernetes.io/name: port-forwarder
name: port-forwarder
spec:
replicas: 1
selector:
matchLabels:
io.kompose.service: port-forwarder
app.kubernetes.io/name: port-forwarder
strategy:
type: Recreate
template:
metadata:
labels:
io.kompose.service: port-forwarder
app.kubernetes.io/name: port-forwarder
spec:
containers:
- image: hpello/tcp-proxy:latest
@ -42,7 +42,7 @@ apiVersion: v1
metadata:
name: ssokustom
labels:
io.kompose.service: port-forwarder
app.kubernetes.io/name: port-forwarder
spec:
ports:
- name: https
@ -52,4 +52,4 @@ spec:
port: 80
targetPort: 80
selector:
io.kompose.service: port-forwarder
app.kubernetes.io/name: port-forwarder

View File

@ -2,19 +2,19 @@ apiVersion: apps/v1
kind: Deployment
metadata:
labels:
io.kompose.service: saml-idp
app.kubernetes.io/name: saml-idp
name: saml-idp
spec:
replicas: 1
selector:
matchLabels:
io.kompose.service: saml-idp
app.kubernetes.io/name: saml-idp
strategy:
type: Recreate
template:
metadata:
labels:
io.kompose.service: saml-idp
app.kubernetes.io/name: saml-idp
spec:
containers:
- image: kristophjunge/test-saml-idp:1.15
@ -35,7 +35,7 @@ apiVersion: v1
kind: Service
metadata:
labels:
io.kompose.service: saml-idp
app.kubernetes.io/name: saml-idp
name: saml-idp
spec:
ports:
@ -46,6 +46,6 @@ spec:
port: 8443
targetPort: 8443
selector:
io.kompose.service: saml-idp
app.kubernetes.io/name: saml-idp
status:
loadBalancer: {}

View File

@ -2,19 +2,19 @@ apiVersion: apps/v1
kind: Deployment
metadata:
labels:
io.kompose.service: hydra-dispatcher
app.kubernetes.io/name: hydra-dispatcher
name: hydra-dispatcher
spec:
replicas: 1
selector:
matchLabels:
io.kompose.service: hydra-dispatcher
app.kubernetes.io/name: hydra-dispatcher
strategy:
type: Recreate
template:
metadata:
labels:
io.kompose.service: hydra-dispatcher
app.kubernetes.io/name: hydra-dispatcher
spec:
containers:
- name: hydra-dispatcher-php-fpm
@ -56,14 +56,14 @@ spec:
readinessProbe:
httpGet:
path: /health
port: 80
port: 8080
initialDelaySeconds: 5
timeoutSeconds: 5
periodSeconds: 10
livenessProbe:
httpGet:
path: /health
port: 80
port: 8080
initialDelaySeconds: 15
timeoutSeconds: 5
periodSeconds: 15

View File

@ -2,13 +2,13 @@ apiVersion: v1
kind: Service
metadata:
labels:
io.kompose.service: hydra-dispatcher
app.kubernetes.io/name: hydra-dispatcher
name: hydra-dispatcher
spec:
ports:
- name: http
port: 80
port: 8080
selector:
io.kompose.service: hydra-dispatcher
app.kubernetes.io/name: hydra-dispatcher
status:
loadBalancer: {}

View File

@ -1,6 +1,12 @@
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
images:
- name: reg.cadoles.com/proxy_cache/oryd/hydra
newTag: v2.1.2
- name: reg.cadoles.com/proxy_cache/oryd/hydra-maester
newTag: v0.0.32-amd64
resources:
- ./resources/hydra-deployment.yaml
- ./resources/hydra-service.yaml

View File

@ -2,19 +2,19 @@ apiVersion: apps/v1
kind: Deployment
metadata:
labels:
io.kompose.service: hydra
app.kubernetes.io/name: hydra
name: hydra
spec:
replicas: 1
selector:
matchLabels:
io.kompose.service: hydra
app.kubernetes.io/name: hydra
strategy:
type: Recreate
template:
metadata:
labels:
io.kompose.service: hydra
app.kubernetes.io/name: hydra
spec:
serviceAccountName: hydra-sa
initContainers:

View File

@ -4,7 +4,6 @@ kind: Kustomization
resources:
- ./resources/hydra-maester-deployment.yaml
- ./resources/hydra-maester-rbac.yaml
- https://raw.githubusercontent.com/ory/k8s/v0.28.2/helm/charts/hydra-maester/crds/crd-oauth2clients.yaml
configMapGenerator:
- name: hydra-maester-env

View File

@ -2,7 +2,7 @@ apiVersion: v1
kind: Service
metadata:
labels:
io.kompose.service: hydra
app.kubernetes.io/name: hydra
name: hydra
spec:
ports:
@ -13,6 +13,6 @@ spec:
port: 4445
targetPort: hydra-admin
selector:
io.kompose.service: hydra
app.kubernetes.io/name: hydra
status:
loadBalancer: {}