Philippe Caseiro
76b90e6c82
This will prevent oauth2-client removal from hydra instances removal. At the time if you deploy an hydra in your namespace for your app and delete it, the hydra-maester CRD will be removed, but we don't want that. More than one project will use this CRD.
36 lines
867 B
YAML
36 lines
867 B
YAML
apiVersion: kustomize.config.k8s.io/v1beta1
|
|
kind: Kustomization
|
|
|
|
resources:
|
|
- ./resources/hydra-deployment.yaml
|
|
- ./resources/hydra-service.yaml
|
|
- ./resources/hydra-role.yaml
|
|
- ./resources/hydra-rolebinding.yaml
|
|
- ./resources/hydra-serviceaccount.yaml
|
|
- ./resources/hydra-migrate-job.yaml
|
|
- ./resources/hydra-janitor-cronjob.yaml
|
|
|
|
secretGenerator:
|
|
- name: hydra-secret
|
|
literals:
|
|
- SECRETS_SYSTEM=ThisShouldBeAbsolutelyChanged
|
|
|
|
configMapGenerator:
|
|
- name: hydra-env
|
|
literals:
|
|
- URLS_SELF_ISSUER=http://localhost:4444
|
|
- URLS_LOGIN=http://hydra-login-app/login
|
|
- URLS_CONSENT=http://hydra-consent-app/consent
|
|
- URLS_LOGOUT=http://hydra-logout-app/logout
|
|
- HYDRA_SERVE_ALL_ARGS=--dev
|
|
- LOG_LEVEL=info
|
|
|
|
vars:
|
|
- name: HYDRA_MIGRATE_JOB_NAME
|
|
objref:
|
|
name: hydra-migrate
|
|
kind: Job
|
|
apiVersion: batch/v1
|
|
fieldref:
|
|
fieldpath: metadata.name
|