diff --git a/components/hydra-ldap/kustomization.yaml b/components/hydra-ldap/kustomization.yaml new file mode 100644 index 0000000..34b655e --- /dev/null +++ b/components/hydra-ldap/kustomization.yaml @@ -0,0 +1,26 @@ +apiVersion: kustomize.config.k8s.io/v1alpha1 +kind: Component + +resources: + - ./resources/deployment.yaml + - ./resources/service.yaml + +configMapGenerator: + - name: hydra-ldap-env + literals: + - WERTHER_DEV_MODE=false + - WERTHER_LDAP_ROLE_CLAIM="https://hydra/claims/roles" + - WERTHER_SKIP_SSL_VERIFICATIONS=false + - WERTHER_IDENTP_CLAIM_SCOPES="name:profile,family_name:profile,given_name:profile,email:email,https%3A%2F%2Fhydra%2Fclaims%2Froles:roles" + - WERTHER_IDENTP_HYDRA_URL="http://hydra:4444" + - WERTHER_LDAP_ENDPOINTS="ldap.test.fr:636" + - WERTHER_LDAP_IS_TLS=true + - WERTHER_LDAP_BASEDN="o=test,c=fr" + - WERTHER_LDAP_ROLE_BASEDN="ou=groups,o=test,c=fr" + - WERTHER_LDAP_CONNECTION_TIMEOUT="10s" + +secretGenerator: + - name: hydra-ldap-sc + literals: + - WERTHER_LDAP_BINDDN="cn=reader,o=test,c=fr" + - WERTHER_LDAP_BINDPW=ThisMustBeAbsolutelyChanged diff --git a/components/hydra-ldap/resources/deployment.yaml b/components/hydra-ldap/resources/deployment.yaml new file mode 100644 index 0000000..d330365 --- /dev/null +++ b/components/hydra-ldap/resources/deployment.yaml @@ -0,0 +1,51 @@ +apiVersion: apps/v1 +kind: Deployment +metadata: + name: hydra-ldap + namespace: default + labels: + app.kubernetes.io/name: hydra-ldap + app.kubernetes.io/version: "v1.2.2" +spec: + replicas: 1 + selector: + matchLabels: + app.kubernetes.io/name: hydra-ldap + template: + metadata: + labels: + app.kubernetes.io/name: hydra-ldap + app.kubernetes.io/version: "v1.2.2" + spec: + containers: + - name: werther + image: reg.cadoles.com/cadoles/hydra-werther:2023.12.6-stable.1421.15a4717 + imagePullPolicy: IfNotPresent + envFrom: + - configMapRef: + name: hydra-ldap-env + env: + - name: WERTHER_WEB_DIR + value: "/usr/share/werther/login/" + - name: WERTHER_LDAP_BINDDN + valueFrom: + secretKeyRef: + name: hydra-ldap-sc + key: WERTHER_LDAP_BINDDN + - name: WERTHER_LDAP_BINDPW + valueFrom: + secretKeyRef: + name: hydra-ldap-sc + key: WERTHER_LDAP_BINDPW + ports: + - containerPort: 8080 + name: hydra-ldap-http + securityContext: + allowPrivilegeEscalation: false + capabilities: + drop: + - ALL + privileged: false + readOnlyRootFilesystem: true + runAsNonRoot: true + runAsUser: 100 diff --git a/components/hydra-ldap/resources/service.yaml b/components/hydra-ldap/resources/service.yaml new file mode 100644 index 0000000..4adbddb --- /dev/null +++ b/components/hydra-ldap/resources/service.yaml @@ -0,0 +1,17 @@ +apiVersion: v1 +kind: Service +metadata: + labels: + io.kompose.service: hydra-ldap + name: hydra-ldap +spec: + type: ClusterIP + ports: + - name: hydra-ldap + port: 8080 + targetPort: hydra-ldap-http + protocol: TCP + selector: + app.kubernetes.io/name: hydra-ldap +status: + loadBalancer: {}