Compare commits
8 Commits
v1.0.1-uns
...
v1.0.8-uns
Author | SHA1 | Date | |
---|---|---|---|
380a116fa8 | |||
72a9932fc5 | |||
1060fdf4be | |||
45953d5531 | |||
29f539f7ab | |||
0084707bbc | |||
0dbd5dd551 | |||
f1d621d4a9 |
@ -2,7 +2,7 @@ apiVersion: v1
|
||||
kind: Service
|
||||
metadata:
|
||||
labels:
|
||||
io.kompose.service: hydra-ldap
|
||||
app.kubernetes.io/name: hydra-ldap
|
||||
name: hydra-ldap
|
||||
spec:
|
||||
type: ClusterIP
|
||||
|
@ -2,15 +2,15 @@ apiVersion: kustomize.config.k8s.io/v1alpha1
|
||||
kind: Component
|
||||
|
||||
resources:
|
||||
- ./resources/hydra-oidc-deployment.yaml
|
||||
- ./resources/hydra-oidc-service.yaml
|
||||
- ./resources/hydra-oidc-deployment.yaml
|
||||
- ./resources/hydra-oidc-service.yaml
|
||||
|
||||
generatorOptions:
|
||||
labels:
|
||||
com.cadoles.forge.sso-kustom/session: redis
|
||||
|
||||
configMapGenerator:
|
||||
- name: hydra-oidc-env
|
||||
- name: hydra-oidc-env
|
||||
literals:
|
||||
- APP_ENV=prod
|
||||
- APP_DEBUG=false
|
||||
@ -31,14 +31,6 @@ configMapGenerator:
|
||||
- COOKIE_PATH=/
|
||||
- TRUSTED_PROXIES=127.0.0.1,REMOTE_ADDR
|
||||
- REDIS_DSN="redis://redis:6379"
|
||||
# - name: hydra-dispatcher-apps
|
||||
# behavior: merge
|
||||
# files:
|
||||
# - apps.yaml=./files/hydra/oidc.yaml
|
||||
|
||||
patchesJson6902:
|
||||
- target:
|
||||
version: v1
|
||||
kind: ConfigMap
|
||||
name: hydra-oidc-env
|
||||
path: patches/hydra-oidc-env.yaml
|
||||
- HYDRA_DISPATCHER_OIDC_LOGIN_URL="http://hydra-oidc/login"
|
||||
- HYDRA_DISPATCHER_OIDC_CONSENT_URL="http://hydra-oidc/consent"
|
||||
- HYDRA_DISPATCHER_OIDC_LOGOUT_URL="http://hydra-oidc/logout"
|
||||
|
@ -1,9 +0,0 @@
|
||||
- op: replace
|
||||
path: "/data/HYDRA_DISPATCHER_OIDC_LOGIN_URL"
|
||||
value: http://hydra-oidc/login
|
||||
- op: replace
|
||||
path: "/data/HYDRA_DISPATCHER_OIDC_CONSENT_URL"
|
||||
value: http://hydra-oidc/consent
|
||||
- op: replace
|
||||
path: "/data/HYDRA_DISPATCHER_OIDC_LOGOUT_URL"
|
||||
value: http://hydra-oidc/logout
|
@ -2,19 +2,19 @@ apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
metadata:
|
||||
labels:
|
||||
io.kompose.service: hydra-oidc
|
||||
app.kubernetes.io/name: hydra-oidc
|
||||
name: hydra-oidc
|
||||
spec:
|
||||
replicas: 1
|
||||
selector:
|
||||
matchLabels:
|
||||
io.kompose.service: hydra-oidc
|
||||
app.kubernetes.io/name: hydra-oidc
|
||||
strategy:
|
||||
type: Recreate
|
||||
template:
|
||||
metadata:
|
||||
labels:
|
||||
io.kompose.service: hydra-oidc
|
||||
app.kubernetes.io/name: hydra-oidc
|
||||
spec:
|
||||
containers:
|
||||
- name: hydra-oidc-php-fpm
|
||||
@ -54,14 +54,14 @@ spec:
|
||||
readinessProbe:
|
||||
httpGet:
|
||||
path: /healthy
|
||||
port: 80
|
||||
port: 8080
|
||||
initialDelaySeconds: 5
|
||||
timeoutSeconds: 5
|
||||
periodSeconds: 10
|
||||
livenessProbe:
|
||||
httpGet:
|
||||
path: /healthy
|
||||
port: 80
|
||||
port: 8080
|
||||
initialDelaySeconds: 15
|
||||
timeoutSeconds: 5
|
||||
periodSeconds: 15
|
||||
|
@ -2,13 +2,13 @@ apiVersion: v1
|
||||
kind: Service
|
||||
metadata:
|
||||
labels:
|
||||
io.kompose.service: hydra-oidc
|
||||
app.kubernetes.io/name: hydra-oidc
|
||||
name: hydra-oidc
|
||||
spec:
|
||||
ports:
|
||||
- name: hydra-oidc
|
||||
port: 80
|
||||
port: 8080
|
||||
selector:
|
||||
io.kompose.service: hydra-oidc
|
||||
app.kubernetes.io/name: hydra-oidc
|
||||
status:
|
||||
loadBalancer: {}
|
||||
|
@ -2,19 +2,19 @@ apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
metadata:
|
||||
labels:
|
||||
io.kompose.service: hydra-saml-remote-user
|
||||
app.kubernetes.io/name: hydra-saml-remote-user
|
||||
name: hydra-saml-remote-user
|
||||
spec:
|
||||
replicas: 1
|
||||
selector:
|
||||
matchLabels:
|
||||
io.kompose.service: hydra-saml-remote-user
|
||||
app.kubernetes.io/name: hydra-saml-remote-user
|
||||
strategy:
|
||||
type: Recreate
|
||||
template:
|
||||
metadata:
|
||||
labels:
|
||||
io.kompose.service: hydra-saml-remote-user
|
||||
app.kubernetes.io/name: hydra-saml-remote-user
|
||||
spec:
|
||||
containers:
|
||||
- name: hydra-saml-remote-user
|
||||
@ -31,7 +31,7 @@ apiVersion: v1
|
||||
kind: Service
|
||||
metadata:
|
||||
labels:
|
||||
io.kompose.service: hydra-saml-remote-user
|
||||
app.kubernetes.io/name: hydra-saml-remote-user
|
||||
name: hydra-saml-remote-user
|
||||
spec:
|
||||
ports:
|
||||
@ -39,6 +39,6 @@ spec:
|
||||
port: 80
|
||||
targetPort: 8080
|
||||
selector:
|
||||
io.kompose.service: hydra-saml-remote-user
|
||||
app.kubernetes.io/name: hydra-saml-remote-user
|
||||
status:
|
||||
loadBalancer: {}
|
||||
|
@ -2,19 +2,19 @@ apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
metadata:
|
||||
labels:
|
||||
io.kompose.service: hydra-saml-shibboleth-sp
|
||||
app.kubernetes.io/name: hydra-saml-shibboleth-sp
|
||||
name: hydra-saml-shibboleth-sp
|
||||
spec:
|
||||
replicas: 1
|
||||
selector:
|
||||
matchLabels:
|
||||
io.kompose.service: hydra-saml-shibboleth-sp
|
||||
app.kubernetes.io/name: hydra-saml-shibboleth-sp
|
||||
strategy:
|
||||
type: Recreate
|
||||
template:
|
||||
metadata:
|
||||
labels:
|
||||
io.kompose.service: hydra-saml-shibboleth-sp
|
||||
app.kubernetes.io/name: hydra-saml-shibboleth-sp
|
||||
spec:
|
||||
securityContext:
|
||||
fsGroup: 102
|
||||
@ -41,14 +41,14 @@ apiVersion: v1
|
||||
kind: Service
|
||||
metadata:
|
||||
labels:
|
||||
io.kompose.service: hydra-saml
|
||||
app.kubernetes.io/name: hydra-saml
|
||||
name: hydra-saml
|
||||
spec:
|
||||
ports:
|
||||
- name: http
|
||||
port: 80
|
||||
selector:
|
||||
io.kompose.service: hydra-saml-shibboleth-sp
|
||||
app.kubernetes.io/name: hydra-saml-shibboleth-sp
|
||||
status:
|
||||
loadBalancer: {}
|
||||
|
||||
|
@ -2,19 +2,19 @@ apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
metadata:
|
||||
labels:
|
||||
io.kompose.service: hydra-sql
|
||||
app.kubernetes.io/name: hydra-sql
|
||||
name: hydra-sql
|
||||
spec:
|
||||
replicas: 1
|
||||
selector:
|
||||
matchLabels:
|
||||
io.kompose.service: hydra-sql
|
||||
app.kubernetes.io/name: hydra-sql
|
||||
strategy:
|
||||
type: Recreate
|
||||
template:
|
||||
metadata:
|
||||
labels:
|
||||
io.kompose.service: hydra-sql
|
||||
app.kubernetes.io/name: hydra-sql
|
||||
spec:
|
||||
containers:
|
||||
- name: hydra-sql-fpm
|
||||
|
@ -2,13 +2,13 @@ apiVersion: v1
|
||||
kind: Service
|
||||
metadata:
|
||||
labels:
|
||||
io.kompose.service: hydra-sql
|
||||
app.kubernetes.io/name: hydra-sql
|
||||
name: hydra-sql
|
||||
spec:
|
||||
ports:
|
||||
- name: hydra-sql
|
||||
port: 8080
|
||||
selector:
|
||||
io.kompose.service: hydra-sql
|
||||
app.kubernetes.io/name: hydra-sql
|
||||
status:
|
||||
loadBalancer: {}
|
||||
|
@ -2,19 +2,19 @@ apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
metadata:
|
||||
labels:
|
||||
io.kompose.service: port-forwarder
|
||||
app.kubernetes.io/name: port-forwarder
|
||||
name: port-forwarder
|
||||
spec:
|
||||
replicas: 1
|
||||
selector:
|
||||
matchLabels:
|
||||
io.kompose.service: port-forwarder
|
||||
app.kubernetes.io/name: port-forwarder
|
||||
strategy:
|
||||
type: Recreate
|
||||
template:
|
||||
metadata:
|
||||
labels:
|
||||
io.kompose.service: port-forwarder
|
||||
app.kubernetes.io/name: port-forwarder
|
||||
spec:
|
||||
containers:
|
||||
- image: hpello/tcp-proxy:latest
|
||||
@ -42,7 +42,7 @@ apiVersion: v1
|
||||
metadata:
|
||||
name: ssokustom
|
||||
labels:
|
||||
io.kompose.service: port-forwarder
|
||||
app.kubernetes.io/name: port-forwarder
|
||||
spec:
|
||||
ports:
|
||||
- name: https
|
||||
@ -52,4 +52,4 @@ spec:
|
||||
port: 80
|
||||
targetPort: 80
|
||||
selector:
|
||||
io.kompose.service: port-forwarder
|
||||
app.kubernetes.io/name: port-forwarder
|
@ -2,19 +2,19 @@ apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
metadata:
|
||||
labels:
|
||||
io.kompose.service: saml-idp
|
||||
app.kubernetes.io/name: saml-idp
|
||||
name: saml-idp
|
||||
spec:
|
||||
replicas: 1
|
||||
selector:
|
||||
matchLabels:
|
||||
io.kompose.service: saml-idp
|
||||
app.kubernetes.io/name: saml-idp
|
||||
strategy:
|
||||
type: Recreate
|
||||
template:
|
||||
metadata:
|
||||
labels:
|
||||
io.kompose.service: saml-idp
|
||||
app.kubernetes.io/name: saml-idp
|
||||
spec:
|
||||
containers:
|
||||
- image: kristophjunge/test-saml-idp:1.15
|
||||
@ -35,7 +35,7 @@ apiVersion: v1
|
||||
kind: Service
|
||||
metadata:
|
||||
labels:
|
||||
io.kompose.service: saml-idp
|
||||
app.kubernetes.io/name: saml-idp
|
||||
name: saml-idp
|
||||
spec:
|
||||
ports:
|
||||
@ -46,6 +46,6 @@ spec:
|
||||
port: 8443
|
||||
targetPort: 8443
|
||||
selector:
|
||||
io.kompose.service: saml-idp
|
||||
app.kubernetes.io/name: saml-idp
|
||||
status:
|
||||
loadBalancer: {}
|
@ -2,19 +2,19 @@ apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
metadata:
|
||||
labels:
|
||||
io.kompose.service: hydra-dispatcher
|
||||
app.kubernetes.io/name: hydra-dispatcher
|
||||
name: hydra-dispatcher
|
||||
spec:
|
||||
replicas: 1
|
||||
selector:
|
||||
matchLabels:
|
||||
io.kompose.service: hydra-dispatcher
|
||||
app.kubernetes.io/name: hydra-dispatcher
|
||||
strategy:
|
||||
type: Recreate
|
||||
template:
|
||||
metadata:
|
||||
labels:
|
||||
io.kompose.service: hydra-dispatcher
|
||||
app.kubernetes.io/name: hydra-dispatcher
|
||||
spec:
|
||||
containers:
|
||||
- name: hydra-dispatcher-php-fpm
|
||||
@ -56,14 +56,14 @@ spec:
|
||||
readinessProbe:
|
||||
httpGet:
|
||||
path: /health
|
||||
port: 80
|
||||
port: 8080
|
||||
initialDelaySeconds: 5
|
||||
timeoutSeconds: 5
|
||||
periodSeconds: 10
|
||||
livenessProbe:
|
||||
httpGet:
|
||||
path: /health
|
||||
port: 80
|
||||
port: 8080
|
||||
initialDelaySeconds: 15
|
||||
timeoutSeconds: 5
|
||||
periodSeconds: 15
|
||||
|
@ -2,13 +2,13 @@ apiVersion: v1
|
||||
kind: Service
|
||||
metadata:
|
||||
labels:
|
||||
io.kompose.service: hydra-dispatcher
|
||||
app.kubernetes.io/name: hydra-dispatcher
|
||||
name: hydra-dispatcher
|
||||
spec:
|
||||
ports:
|
||||
- name: http
|
||||
port: 80
|
||||
port: 8080
|
||||
selector:
|
||||
io.kompose.service: hydra-dispatcher
|
||||
app.kubernetes.io/name: hydra-dispatcher
|
||||
status:
|
||||
loadBalancer: {}
|
||||
|
@ -1,23 +1,29 @@
|
||||
apiVersion: kustomize.config.k8s.io/v1beta1
|
||||
kind: Kustomization
|
||||
|
||||
images:
|
||||
- name: reg.cadoles.com/proxy_cache/oryd/hydra
|
||||
newTag: v2.1.2
|
||||
- name: reg.cadoles.com/proxy_cache/oryd/hydra-maester
|
||||
newTag: v0.0.32-amd64
|
||||
|
||||
resources:
|
||||
- ./resources/hydra-deployment.yaml
|
||||
- ./resources/hydra-service.yaml
|
||||
- ./resources/hydra-role.yaml
|
||||
- ./resources/hydra-rolebinding.yaml
|
||||
- ./resources/hydra-serviceaccount.yaml
|
||||
- ./resources/hydra-migrate-job.yaml
|
||||
- ./resources/hydra-maester
|
||||
- ./resources/hydra-janitor-cronjob.yaml
|
||||
- ./resources/hydra-deployment.yaml
|
||||
- ./resources/hydra-service.yaml
|
||||
- ./resources/hydra-role.yaml
|
||||
- ./resources/hydra-rolebinding.yaml
|
||||
- ./resources/hydra-serviceaccount.yaml
|
||||
- ./resources/hydra-migrate-job.yaml
|
||||
- ./resources/hydra-maester
|
||||
- ./resources/hydra-janitor-cronjob.yaml
|
||||
|
||||
secretGenerator:
|
||||
- name: hydra-secret
|
||||
- name: hydra-secret
|
||||
literals:
|
||||
- SECRETS_SYSTEM=ThisShouldBeAbsolutelyChanged
|
||||
|
||||
configMapGenerator:
|
||||
- name: hydra-env
|
||||
- name: hydra-env
|
||||
literals:
|
||||
- URLS_SELF_ISSUER=http://localhost:4444
|
||||
- URLS_LOGIN=http://hydra-login-app/login
|
||||
|
@ -2,19 +2,19 @@ apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
metadata:
|
||||
labels:
|
||||
io.kompose.service: hydra
|
||||
app.kubernetes.io/name: hydra
|
||||
name: hydra
|
||||
spec:
|
||||
replicas: 1
|
||||
selector:
|
||||
matchLabels:
|
||||
io.kompose.service: hydra
|
||||
app.kubernetes.io/name: hydra
|
||||
strategy:
|
||||
type: Recreate
|
||||
template:
|
||||
metadata:
|
||||
labels:
|
||||
io.kompose.service: hydra
|
||||
app.kubernetes.io/name: hydra
|
||||
spec:
|
||||
serviceAccountName: hydra-sa
|
||||
initContainers:
|
||||
|
@ -4,7 +4,6 @@ kind: Kustomization
|
||||
resources:
|
||||
- ./resources/hydra-maester-deployment.yaml
|
||||
- ./resources/hydra-maester-rbac.yaml
|
||||
#- https://raw.githubusercontent.com/ory/k8s/v0.28.2/helm/charts/hydra-maester/crds/crd-oauth2clients.yaml
|
||||
|
||||
configMapGenerator:
|
||||
- name: hydra-maester-env
|
||||
|
@ -2,7 +2,7 @@ apiVersion: v1
|
||||
kind: Service
|
||||
metadata:
|
||||
labels:
|
||||
io.kompose.service: hydra
|
||||
app.kubernetes.io/name: hydra
|
||||
name: hydra
|
||||
spec:
|
||||
ports:
|
||||
@ -13,6 +13,6 @@ spec:
|
||||
port: 4445
|
||||
targetPort: hydra-admin
|
||||
selector:
|
||||
io.kompose.service: hydra
|
||||
app.kubernetes.io/name: hydra
|
||||
status:
|
||||
loadBalancer: {}
|
||||
|
Reference in New Issue
Block a user