REFACTOR(authelia): integrate ingress in values
- Move config.yaml, middleware.yaml, rbac.yaml to manifests/ - Add ingress configuration to helm-values.yaml - Remove separate ingress.yaml
This commit is contained in:
17
authelia/manifests/config.yaml
Normal file
17
authelia/manifests/config.yaml
Normal file
@@ -0,0 +1,17 @@
|
||||
apiVersion: v1
|
||||
kind: ConfigMap
|
||||
metadata:
|
||||
name: authelia-config
|
||||
namespace: authelia
|
||||
data:
|
||||
users_database.yml: |
|
||||
# Authelia Users Database
|
||||
# Generate password hash: docker run --rm authelia/authelia:latest authelia crypto hash generate argon2
|
||||
users:
|
||||
admin:
|
||||
disabled: false
|
||||
displayname: "Admin"
|
||||
email: "bluemayne0213@icloud.com"
|
||||
password: "$argon2id$v=19$m=65536,t=3,p=4$PHApThq3PclXyjhly4bAwA$ZdC+5EEshnK/MDsQb2fUfpujG3ujcFM7APmqrMgXjsE"
|
||||
groups:
|
||||
- admins
|
||||
14
authelia/manifests/middleware.yaml
Normal file
14
authelia/manifests/middleware.yaml
Normal file
@@ -0,0 +1,14 @@
|
||||
apiVersion: traefik.io/v1alpha1
|
||||
kind: Middleware
|
||||
metadata:
|
||||
name: authelia-auth
|
||||
namespace: authelia
|
||||
spec:
|
||||
forwardAuth:
|
||||
address: http://authelia.authelia.svc.cluster.local/api/authz/forward-auth
|
||||
trustForwardHeader: true
|
||||
authResponseHeaders:
|
||||
- Remote-User
|
||||
- Remote-Groups
|
||||
- Remote-Email
|
||||
- Remote-Name
|
||||
12
authelia/manifests/rbac.yaml
Normal file
12
authelia/manifests/rbac.yaml
Normal file
@@ -0,0 +1,12 @@
|
||||
apiVersion: rbac.authorization.k8s.io/v1
|
||||
kind: ClusterRoleBinding
|
||||
metadata:
|
||||
name: oidc-admin-authelia
|
||||
roleRef:
|
||||
apiGroup: rbac.authorization.k8s.io
|
||||
kind: ClusterRole
|
||||
name: cluster-admin
|
||||
subjects:
|
||||
- apiGroup: rbac.authorization.k8s.io
|
||||
kind: User
|
||||
name: "https://auth0213.kro.kr#admin"
|
||||
Reference in New Issue
Block a user