Compare commits

..

8 Commits

17 changed files with 165 additions and 177 deletions

View File

@ -2,7 +2,7 @@ apiVersion: v1
kind: Service kind: Service
metadata: metadata:
labels: labels:
io.kompose.service: hydra-ldap app.kubernetes.io/name: hydra-ldap
name: hydra-ldap name: hydra-ldap
spec: spec:
type: ClusterIP type: ClusterIP

View File

@ -2,15 +2,15 @@ apiVersion: kustomize.config.k8s.io/v1alpha1
kind: Component kind: Component
resources: resources:
- ./resources/hydra-oidc-deployment.yaml - ./resources/hydra-oidc-deployment.yaml
- ./resources/hydra-oidc-service.yaml - ./resources/hydra-oidc-service.yaml
generatorOptions: generatorOptions:
labels: labels:
com.cadoles.forge.sso-kustom/session: redis com.cadoles.forge.sso-kustom/session: redis
configMapGenerator: configMapGenerator:
- name: hydra-oidc-env - name: hydra-oidc-env
literals: literals:
- APP_ENV=prod - APP_ENV=prod
- APP_DEBUG=false - APP_DEBUG=false
@ -31,14 +31,6 @@ configMapGenerator:
- COOKIE_PATH=/ - COOKIE_PATH=/
- TRUSTED_PROXIES=127.0.0.1,REMOTE_ADDR - TRUSTED_PROXIES=127.0.0.1,REMOTE_ADDR
- REDIS_DSN="redis://redis:6379" - REDIS_DSN="redis://redis:6379"
# - name: hydra-dispatcher-apps - HYDRA_DISPATCHER_OIDC_LOGIN_URL="http://hydra-oidc/login"
# behavior: merge - HYDRA_DISPATCHER_OIDC_CONSENT_URL="http://hydra-oidc/consent"
# files: - HYDRA_DISPATCHER_OIDC_LOGOUT_URL="http://hydra-oidc/logout"
# - apps.yaml=./files/hydra/oidc.yaml
patchesJson6902:
- target:
version: v1
kind: ConfigMap
name: hydra-oidc-env
path: patches/hydra-oidc-env.yaml

View File

@ -1,9 +0,0 @@
- op: replace
path: "/data/HYDRA_DISPATCHER_OIDC_LOGIN_URL"
value: http://hydra-oidc/login
- op: replace
path: "/data/HYDRA_DISPATCHER_OIDC_CONSENT_URL"
value: http://hydra-oidc/consent
- op: replace
path: "/data/HYDRA_DISPATCHER_OIDC_LOGOUT_URL"
value: http://hydra-oidc/logout

View File

@ -2,19 +2,19 @@ apiVersion: apps/v1
kind: Deployment kind: Deployment
metadata: metadata:
labels: labels:
io.kompose.service: hydra-oidc app.kubernetes.io/name: hydra-oidc
name: hydra-oidc name: hydra-oidc
spec: spec:
replicas: 1 replicas: 1
selector: selector:
matchLabels: matchLabels:
io.kompose.service: hydra-oidc app.kubernetes.io/name: hydra-oidc
strategy: strategy:
type: Recreate type: Recreate
template: template:
metadata: metadata:
labels: labels:
io.kompose.service: hydra-oidc app.kubernetes.io/name: hydra-oidc
spec: spec:
containers: containers:
- name: hydra-oidc-php-fpm - name: hydra-oidc-php-fpm
@ -54,14 +54,14 @@ spec:
readinessProbe: readinessProbe:
httpGet: httpGet:
path: /healthy path: /healthy
port: 80 port: 8080
initialDelaySeconds: 5 initialDelaySeconds: 5
timeoutSeconds: 5 timeoutSeconds: 5
periodSeconds: 10 periodSeconds: 10
livenessProbe: livenessProbe:
httpGet: httpGet:
path: /healthy path: /healthy
port: 80 port: 8080
initialDelaySeconds: 15 initialDelaySeconds: 15
timeoutSeconds: 5 timeoutSeconds: 5
periodSeconds: 15 periodSeconds: 15

View File

@ -2,13 +2,13 @@ apiVersion: v1
kind: Service kind: Service
metadata: metadata:
labels: labels:
io.kompose.service: hydra-oidc app.kubernetes.io/name: hydra-oidc
name: hydra-oidc name: hydra-oidc
spec: spec:
ports: ports:
- name: hydra-oidc - name: hydra-oidc
port: 80 port: 8080
selector: selector:
io.kompose.service: hydra-oidc app.kubernetes.io/name: hydra-oidc
status: status:
loadBalancer: {} loadBalancer: {}

View File

@ -2,19 +2,19 @@ apiVersion: apps/v1
kind: Deployment kind: Deployment
metadata: metadata:
labels: labels:
io.kompose.service: hydra-saml-remote-user app.kubernetes.io/name: hydra-saml-remote-user
name: hydra-saml-remote-user name: hydra-saml-remote-user
spec: spec:
replicas: 1 replicas: 1
selector: selector:
matchLabels: matchLabels:
io.kompose.service: hydra-saml-remote-user app.kubernetes.io/name: hydra-saml-remote-user
strategy: strategy:
type: Recreate type: Recreate
template: template:
metadata: metadata:
labels: labels:
io.kompose.service: hydra-saml-remote-user app.kubernetes.io/name: hydra-saml-remote-user
spec: spec:
containers: containers:
- name: hydra-saml-remote-user - name: hydra-saml-remote-user
@ -31,7 +31,7 @@ apiVersion: v1
kind: Service kind: Service
metadata: metadata:
labels: labels:
io.kompose.service: hydra-saml-remote-user app.kubernetes.io/name: hydra-saml-remote-user
name: hydra-saml-remote-user name: hydra-saml-remote-user
spec: spec:
ports: ports:
@ -39,6 +39,6 @@ spec:
port: 80 port: 80
targetPort: 8080 targetPort: 8080
selector: selector:
io.kompose.service: hydra-saml-remote-user app.kubernetes.io/name: hydra-saml-remote-user
status: status:
loadBalancer: {} loadBalancer: {}

View File

@ -2,19 +2,19 @@ apiVersion: apps/v1
kind: Deployment kind: Deployment
metadata: metadata:
labels: labels:
io.kompose.service: hydra-saml-shibboleth-sp app.kubernetes.io/name: hydra-saml-shibboleth-sp
name: hydra-saml-shibboleth-sp name: hydra-saml-shibboleth-sp
spec: spec:
replicas: 1 replicas: 1
selector: selector:
matchLabels: matchLabels:
io.kompose.service: hydra-saml-shibboleth-sp app.kubernetes.io/name: hydra-saml-shibboleth-sp
strategy: strategy:
type: Recreate type: Recreate
template: template:
metadata: metadata:
labels: labels:
io.kompose.service: hydra-saml-shibboleth-sp app.kubernetes.io/name: hydra-saml-shibboleth-sp
spec: spec:
securityContext: securityContext:
fsGroup: 102 fsGroup: 102
@ -41,14 +41,14 @@ apiVersion: v1
kind: Service kind: Service
metadata: metadata:
labels: labels:
io.kompose.service: hydra-saml app.kubernetes.io/name: hydra-saml
name: hydra-saml name: hydra-saml
spec: spec:
ports: ports:
- name: http - name: http
port: 80 port: 80
selector: selector:
io.kompose.service: hydra-saml-shibboleth-sp app.kubernetes.io/name: hydra-saml-shibboleth-sp
status: status:
loadBalancer: {} loadBalancer: {}

View File

@ -2,19 +2,19 @@ apiVersion: apps/v1
kind: Deployment kind: Deployment
metadata: metadata:
labels: labels:
io.kompose.service: hydra-sql app.kubernetes.io/name: hydra-sql
name: hydra-sql name: hydra-sql
spec: spec:
replicas: 1 replicas: 1
selector: selector:
matchLabels: matchLabels:
io.kompose.service: hydra-sql app.kubernetes.io/name: hydra-sql
strategy: strategy:
type: Recreate type: Recreate
template: template:
metadata: metadata:
labels: labels:
io.kompose.service: hydra-sql app.kubernetes.io/name: hydra-sql
spec: spec:
containers: containers:
- name: hydra-sql-fpm - name: hydra-sql-fpm

View File

@ -2,13 +2,13 @@ apiVersion: v1
kind: Service kind: Service
metadata: metadata:
labels: labels:
io.kompose.service: hydra-sql app.kubernetes.io/name: hydra-sql
name: hydra-sql name: hydra-sql
spec: spec:
ports: ports:
- name: hydra-sql - name: hydra-sql
port: 8080 port: 8080
selector: selector:
io.kompose.service: hydra-sql app.kubernetes.io/name: hydra-sql
status: status:
loadBalancer: {} loadBalancer: {}

View File

@ -2,19 +2,19 @@ apiVersion: apps/v1
kind: Deployment kind: Deployment
metadata: metadata:
labels: labels:
io.kompose.service: port-forwarder app.kubernetes.io/name: port-forwarder
name: port-forwarder name: port-forwarder
spec: spec:
replicas: 1 replicas: 1
selector: selector:
matchLabels: matchLabels:
io.kompose.service: port-forwarder app.kubernetes.io/name: port-forwarder
strategy: strategy:
type: Recreate type: Recreate
template: template:
metadata: metadata:
labels: labels:
io.kompose.service: port-forwarder app.kubernetes.io/name: port-forwarder
spec: spec:
containers: containers:
- image: hpello/tcp-proxy:latest - image: hpello/tcp-proxy:latest
@ -42,7 +42,7 @@ apiVersion: v1
metadata: metadata:
name: ssokustom name: ssokustom
labels: labels:
io.kompose.service: port-forwarder app.kubernetes.io/name: port-forwarder
spec: spec:
ports: ports:
- name: https - name: https
@ -52,4 +52,4 @@ spec:
port: 80 port: 80
targetPort: 80 targetPort: 80
selector: selector:
io.kompose.service: port-forwarder app.kubernetes.io/name: port-forwarder

View File

@ -2,19 +2,19 @@ apiVersion: apps/v1
kind: Deployment kind: Deployment
metadata: metadata:
labels: labels:
io.kompose.service: saml-idp app.kubernetes.io/name: saml-idp
name: saml-idp name: saml-idp
spec: spec:
replicas: 1 replicas: 1
selector: selector:
matchLabels: matchLabels:
io.kompose.service: saml-idp app.kubernetes.io/name: saml-idp
strategy: strategy:
type: Recreate type: Recreate
template: template:
metadata: metadata:
labels: labels:
io.kompose.service: saml-idp app.kubernetes.io/name: saml-idp
spec: spec:
containers: containers:
- image: kristophjunge/test-saml-idp:1.15 - image: kristophjunge/test-saml-idp:1.15
@ -35,7 +35,7 @@ apiVersion: v1
kind: Service kind: Service
metadata: metadata:
labels: labels:
io.kompose.service: saml-idp app.kubernetes.io/name: saml-idp
name: saml-idp name: saml-idp
spec: spec:
ports: ports:
@ -46,6 +46,6 @@ spec:
port: 8443 port: 8443
targetPort: 8443 targetPort: 8443
selector: selector:
io.kompose.service: saml-idp app.kubernetes.io/name: saml-idp
status: status:
loadBalancer: {} loadBalancer: {}

View File

@ -2,19 +2,19 @@ apiVersion: apps/v1
kind: Deployment kind: Deployment
metadata: metadata:
labels: labels:
io.kompose.service: hydra-dispatcher app.kubernetes.io/name: hydra-dispatcher
name: hydra-dispatcher name: hydra-dispatcher
spec: spec:
replicas: 1 replicas: 1
selector: selector:
matchLabels: matchLabels:
io.kompose.service: hydra-dispatcher app.kubernetes.io/name: hydra-dispatcher
strategy: strategy:
type: Recreate type: Recreate
template: template:
metadata: metadata:
labels: labels:
io.kompose.service: hydra-dispatcher app.kubernetes.io/name: hydra-dispatcher
spec: spec:
containers: containers:
- name: hydra-dispatcher-php-fpm - name: hydra-dispatcher-php-fpm
@ -56,14 +56,14 @@ spec:
readinessProbe: readinessProbe:
httpGet: httpGet:
path: /health path: /health
port: 80 port: 8080
initialDelaySeconds: 5 initialDelaySeconds: 5
timeoutSeconds: 5 timeoutSeconds: 5
periodSeconds: 10 periodSeconds: 10
livenessProbe: livenessProbe:
httpGet: httpGet:
path: /health path: /health
port: 80 port: 8080
initialDelaySeconds: 15 initialDelaySeconds: 15
timeoutSeconds: 5 timeoutSeconds: 5
periodSeconds: 15 periodSeconds: 15

View File

@ -2,13 +2,13 @@ apiVersion: v1
kind: Service kind: Service
metadata: metadata:
labels: labels:
io.kompose.service: hydra-dispatcher app.kubernetes.io/name: hydra-dispatcher
name: hydra-dispatcher name: hydra-dispatcher
spec: spec:
ports: ports:
- name: http - name: http
port: 80 port: 8080
selector: selector:
io.kompose.service: hydra-dispatcher app.kubernetes.io/name: hydra-dispatcher
status: status:
loadBalancer: {} loadBalancer: {}

View File

@ -1,23 +1,29 @@
apiVersion: kustomize.config.k8s.io/v1beta1 apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization kind: Kustomization
images:
- name: reg.cadoles.com/proxy_cache/oryd/hydra
newTag: v2.1.2
- name: reg.cadoles.com/proxy_cache/oryd/hydra-maester
newTag: v0.0.32-amd64
resources: resources:
- ./resources/hydra-deployment.yaml - ./resources/hydra-deployment.yaml
- ./resources/hydra-service.yaml - ./resources/hydra-service.yaml
- ./resources/hydra-role.yaml - ./resources/hydra-role.yaml
- ./resources/hydra-rolebinding.yaml - ./resources/hydra-rolebinding.yaml
- ./resources/hydra-serviceaccount.yaml - ./resources/hydra-serviceaccount.yaml
- ./resources/hydra-migrate-job.yaml - ./resources/hydra-migrate-job.yaml
- ./resources/hydra-maester - ./resources/hydra-maester
- ./resources/hydra-janitor-cronjob.yaml - ./resources/hydra-janitor-cronjob.yaml
secretGenerator: secretGenerator:
- name: hydra-secret - name: hydra-secret
literals: literals:
- SECRETS_SYSTEM=ThisShouldBeAbsolutelyChanged - SECRETS_SYSTEM=ThisShouldBeAbsolutelyChanged
configMapGenerator: configMapGenerator:
- name: hydra-env - name: hydra-env
literals: literals:
- URLS_SELF_ISSUER=http://localhost:4444 - URLS_SELF_ISSUER=http://localhost:4444
- URLS_LOGIN=http://hydra-login-app/login - URLS_LOGIN=http://hydra-login-app/login

View File

@ -2,19 +2,19 @@ apiVersion: apps/v1
kind: Deployment kind: Deployment
metadata: metadata:
labels: labels:
io.kompose.service: hydra app.kubernetes.io/name: hydra
name: hydra name: hydra
spec: spec:
replicas: 1 replicas: 1
selector: selector:
matchLabels: matchLabels:
io.kompose.service: hydra app.kubernetes.io/name: hydra
strategy: strategy:
type: Recreate type: Recreate
template: template:
metadata: metadata:
labels: labels:
io.kompose.service: hydra app.kubernetes.io/name: hydra
spec: spec:
serviceAccountName: hydra-sa serviceAccountName: hydra-sa
initContainers: initContainers:

View File

@ -4,7 +4,6 @@ kind: Kustomization
resources: resources:
- ./resources/hydra-maester-deployment.yaml - ./resources/hydra-maester-deployment.yaml
- ./resources/hydra-maester-rbac.yaml - ./resources/hydra-maester-rbac.yaml
#- https://raw.githubusercontent.com/ory/k8s/v0.28.2/helm/charts/hydra-maester/crds/crd-oauth2clients.yaml
configMapGenerator: configMapGenerator:
- name: hydra-maester-env - name: hydra-maester-env

View File

@ -2,7 +2,7 @@ apiVersion: v1
kind: Service kind: Service
metadata: metadata:
labels: labels:
io.kompose.service: hydra app.kubernetes.io/name: hydra
name: hydra name: hydra
spec: spec:
ports: ports:
@ -13,6 +13,6 @@ spec:
port: 4445 port: 4445
targetPort: hydra-admin targetPort: hydra-admin
selector: selector:
io.kompose.service: hydra app.kubernetes.io/name: hydra
status: status:
loadBalancer: {} loadBalancer: {}