243 lines
8.6 KiB
Smarty
243 lines
8.6 KiB
Smarty
|
{{/* Define the configmap */}}
|
||
|
|
{{- define "guacamole-client.configmap" -}}
|
||
|
|
---
|
||
|
|
apiVersion: v1
|
||
|
|
kind: ConfigMap
|
||
|
|
metadata:
|
||
|
|
name: guacamole-client-env
|
||
|
|
data:
|
||
|
|
{{/* GENERAL */}}
|
||
|
|
{{- with .Values.general.EXTENSION_PRIORITY }}
|
||
|
|
EXTENSION_PRIORITY: {{ . | quote }}
|
||
|
|
{{- end }}
|
||
|
|
{{/* API */}}
|
||
|
|
{{- with .Values.api.API_SESSION_TIMEOUT }}
|
||
|
|
API_SESSION_TIMEOUT: {{ . | quote }}
|
||
|
|
{{- end }}
|
||
|
|
{{/* TOTP */}}
|
||
|
|
{{- if .Values.totp.TOTP_ENABLED }}
|
||
|
|
TOTP_ENABLED: {{ .Values.totp.TOTP_ENABLED | quote }}
|
||
|
|
{{- with .Values.totp.TOTP_ISSUER }}
|
||
|
|
TOTP_ISSUER: {{ . | quote }}
|
||
|
|
{{- end }}
|
||
|
|
{{- with .Values.totp.TOTP_DIGITS }}
|
||
|
|
TOTP_DIGITS: {{ . | quote }}
|
||
|
|
{{- end }}
|
||
|
|
{{- with .Values.totp.TOTP_PERIOD }}
|
||
|
|
TOTP_PERIOD: {{ . | quote }}
|
||
|
|
{{- end }}
|
||
|
|
{{- with .Values.totp.TOTP_MODE }}
|
||
|
|
TOTP_MODE: {{ . | quote }}
|
||
|
|
{{- end }}
|
||
|
|
{{- end }}
|
||
|
|
{{/* HEADER */}}
|
||
|
|
{{- if .Values.header.HEADER_ENABLED }}
|
||
|
|
HEADER_ENABLED: {{ .Values.header.HEADER_ENABLED | quote }}
|
||
|
|
{{- with .Values.header.HTTP_AUTH_HEADER }}
|
||
|
|
HTTP_AUTH_HEADER: {{ . | quote }}
|
||
|
|
{{- end }}
|
||
|
|
{{- end }}
|
||
|
|
{{/* JSON */}}
|
||
|
|
{{- with .Values.json.JSON_SECRET_KEY }}
|
||
|
|
JSON_SECRET_KEY: {{ . | quote }}
|
||
|
|
{{- with .Values.json.JSON_TRUSTED_NETWORKS }}
|
||
|
|
JSON_TRUSTED_NETWORKS: {{ . | quote }}
|
||
|
|
{{- end }}
|
||
|
|
{{- end }}
|
||
|
|
{{/* DUO */}}
|
||
|
|
{{- if and .Values.duo.DUO_API_HOSTNAME .Values.duo.DUO_INTEGRATION_KEY .Values.duo.DUO_SECRET_KEY .Values.duo.DUO_APPLICATION_KEY }}
|
||
|
|
DUO_API_HOSTNAME: {{ .Values.duo.DUO_API_HOSTNAME | quote }}
|
||
|
|
DUO_INTEGRATION_KEY: {{ .Values.duo.DUO_INTEGRATION_KEY | quote }}
|
||
|
|
DUO_SECRET_KEY: {{ .Values.duo.DUO_SECRET_KEY | quote }}
|
||
|
|
DUO_APPLICATION_KEY: {{ .Values.duo.DUO_APPLICATION_KEY | quote }}
|
||
|
|
{{- end }}
|
||
|
|
{{/* CAS */}}
|
||
|
|
{{- if and .Values.cas.CAS_AUTHORIZATION_ENDPOINT .Values.cas.CAS_REDIRECT_URI }}
|
||
|
|
CAS_AUTHORIZATION_ENDPOINT: {{ .Values.cas.CAS_AUTHORIZATION_ENDPOINT | quote }}
|
||
|
|
CAS_REDIRECT_URI: {{ .Values.cas.CAS_REDIRECT_URI | quote }}
|
||
|
|
{{- with .Values.cas.CAS_CLEARPASS_KEY }}
|
||
|
|
CAS_CLEARPASS_KEY: {{ . | quote }}
|
||
|
|
{{- end }}
|
||
|
|
{{- with .Values.cas.CAS_GROUP_ATTRIBUTE }}
|
||
|
|
CAS_GROUP_ATTRIBUTE: {{ . | quote }}
|
||
|
|
{{- with .Values.cas.CAS_GROUP_FORMAT }}
|
||
|
|
CAS_GROUP_FORMAT: {{ . | quote }}
|
||
|
|
{{- if eq .Values.cas.CAS_GROUP_FORMAT "ldap" }}
|
||
|
|
{{- with .Values.cas.CAS_GROUP_LDAP_BASE_DN }}
|
||
|
|
CAS_GROUP_LDAP_BASE_DN: {{ . | quote }}
|
||
|
|
{{- with .Values.cas.CAS_GROUP_LDAP_ATTRIBUTE }}
|
||
|
|
CAS_GROUP_LDAP_ATTRIBUTE: {{ . | quote }}
|
||
|
|
{{- end }}
|
||
|
|
{{- end }}
|
||
|
|
{{- end }}
|
||
|
|
{{- end }}
|
||
|
|
{{- end }}
|
||
|
|
{{- end }}
|
||
|
|
{{/* OpenID */}}
|
||
|
|
{{- if and .Values.openid.OPENID_AUTHORIZATION_ENDPOINT .Values.openid.OPENID_JWKS_ENDPOINT .Values.openid.OPENID_ISSUER .Values.openid.OPENID_CLIENT_ID .Values.openid.OPENID_REDIRECT_URI }}
|
||
|
|
OPENID_AUTHORIZATION_ENDPOINT: {{ .Values.openid.OPENID_AUTHORIZATION_ENDPOINT | quote }}
|
||
|
|
OPENID_JWKS_ENDPOINT: {{ .Values.openid.OPENID_JWKS_ENDPOINT | quote }}
|
||
|
|
OPENID_ISSUER: {{ .Values.openid.OPENID_ISSUER | quote }}
|
||
|
|
OPENID_CLIENT_ID: {{ .Values.openid.OPENID_CLIENT_ID | quote }}
|
||
|
|
OPENID_REDIRECT_URI: {{ .Values.openid.OPENID_REDIRECT_URI | quote }}
|
||
|
|
{{- with .Values.openid.OPENID_USERNAME_CLAIM_TYPE }}
|
||
|
|
OPENID_USERNAME_CLAIM_TYPE: {{ . | quote }}
|
||
|
|
{{- end }}
|
||
|
|
{{- with .Values.openid.OPENID_GROUPS_CLAIM_TYPE }}
|
||
|
|
OPENID_GROUPS_CLAIM_TYPE: {{ . | quote }}
|
||
|
|
{{- end }}
|
||
|
|
{{- with .Values.openid.OPENID_MAX_TOKEN_VALIDITY }}
|
||
|
|
OPENID_MAX_TOKEN_VALIDITY: {{ . | quote }}
|
||
|
|
{{- end }}
|
||
|
|
{{- end }}
|
||
|
|
{{/* RADIUS */}}
|
||
|
|
{{- if and .Values.radius.RADIUS_SHARED_SECRET .Values.radius.RADIUS_AUTH_PROTOCOL }}
|
||
|
|
RADIUS_SHARED_SECRET: {{ .Values.radius.RADIUS_SHARED_SECRET | quote }}
|
||
|
|
RADIUS_AUTH_PROTOCOL: {{ .Values.radius.RADIUS_AUTH_PROTOCOL | quote }}
|
||
|
|
{{- with .Values.radius.RADIUS_HOSTNAME }}
|
||
|
|
RADIUS_HOSTNAME: {{ . | quote }}
|
||
|
|
{{- end }}
|
||
|
|
{{- with .Values.radius.RADIUS_AUTH_PORT }}
|
||
|
|
RADIUS_AUTH_PORT: {{ . | quote }}
|
||
|
|
{{- end }}
|
||
|
|
{{- with .Values.radius.RADIUS_KEY_FILE }}
|
||
|
|
RADIUS_KEY_FILE: {{ . | quote }}
|
||
|
|
{{- end }}
|
||
|
|
{{- with .Values.radius.RADIUS_KEY_TYPE }}
|
||
|
|
RADIUS_KEY_TYPE: {{ . | quote }}
|
||
|
|
{{- end }}
|
||
|
|
{{- with .Values.radius.RADIUS_KEY_PASSWORD }}
|
||
|
|
RADIUS_KEY_PASSWORD: {{ . | quote }}
|
||
|
|
{{- end }}
|
||
|
|
{{- with .Values.radius.RADIUS_CA_FILE }}
|
||
|
|
RADIUS_CA_FILE: {{ . | quote }}
|
||
|
|
{{- end }}
|
||
|
|
{{- with .Values.radius.RADIUS_CA_TYPE }}
|
||
|
|
RADIUS_CA_TYPE: {{ . | quote }}
|
||
|
|
{{- end }}
|
||
|
|
{{- with .Values.radius.RADIUS_CA_PASSWORD }}
|
||
|
|
RADIUS_CA_PASSWORD: {{ . | quote }}
|
||
|
|
{{- end }}
|
||
|
|
{{- if .Values.radius.RADIUS_TRUST_ALL }}
|
||
|
|
RADIUS_TRUST_ALL: {{ .Values.radius.RADIUS_TRUST_ALL | quote }}
|
||
|
|
{{- end }}
|
||
|
|
{{- with .Values.radius.RADIUS_RETRIES }}
|
||
|
|
RADIUS_RETRIES: {{ . | quote }}
|
||
|
|
{{- end }}
|
||
|
|
{{- with .Values.radius.RADIUS_TIMEOUT }}
|
||
|
|
RADIUS_TIMEOUT: {{ . | quote }}
|
||
|
|
{{- end }}
|
||
|
|
{{- with .Values.radius.RADIUS_EAP_TTLS_INNER_PROTOCOL }}
|
||
|
|
RADIUS_EAP_TTLS_INNER_PROTOCOL: {{ . | quote }}
|
||
|
|
{{- end }}
|
||
|
|
{{- end }}
|
||
|
|
{{/* LDAP */}}
|
||
|
|
{{- if and .Values.ldap.LDAP_HOSTNAME .Values.ldap.LDAP_USER_BASE_DN }}
|
||
|
|
LDAP_HOSTNAME: {{ .Values.ldap.LDAP_HOSTNAME | quote }}
|
||
|
|
LDAP_USER_BASE_DN: {{ .Values.ldap.LDAP_USER_BASE_DN | quote }}
|
||
|
|
{{- with .Values.ldap.LDAP_PORT }}
|
||
|
|
LDAP_PORT: {{ . | quote }}
|
||
|
|
{{- end }}
|
||
|
|
{{- with .Values.ldap.LDAP_ENCRYPTION_METHOD }}
|
||
|
|
LDAP_ENCRYPTION_METHOD: {{ . | quote }}
|
||
|
|
{{- end }}
|
||
|
|
{{- with .Values.ldap.LDAP_MAX_SEARCH_RESULTS }}
|
||
|
|
LDAP_MAX_SEARCH_RESULTS: {{ . | quote }}
|
||
|
|
{{- end }}
|
||
|
|
{{- with .Values.ldap.LDAP_SEARCH_BIND_DN }}
|
||
|
|
LDAP_SEARCH_BIND_DN: {{ .| quote }}
|
||
|
|
{{- end }}
|
||
|
|
{{- with .Values.ldap.LDAP_USER_ATTRIBUTES }}
|
||
|
|
LDAP_USER_ATTRIBUTES: {{ . | quote }}
|
||
|
|
{{- end }}
|
||
|
|
{{- with .Values.ldap.LDAP_SEARCH_BIND_PASSWORD }}
|
||
|
|
LDAP_SEARCH_BIND_PASSWORD: {{ . | quote }}
|
||
|
|
{{- end }}
|
||
|
|
{{- with .Values.ldap.LDAP_USERNAME_ATTRIBUTE }}
|
||
|
|
LDAP_USERNAME_ATTRIBUTE: {{ . | quote }}
|
||
|
|
{{- end }}
|
||
|
|
{{- with .Values.ldap.LDAP_MEMBER_ATTRIBUTE }}
|
||
|
|
LDAP_MEMBER_ATTRIBUTE: {{ . | quote }}
|
||
|
|
{{- end }}
|
||
|
|
{{- with .Values.ldap.LDAP_USER_SEARCH_FILTER }}
|
||
|
|
LDAP_USER_SEARCH_FILTER: {{ . | quote }}
|
||
|
|
{{- end }}
|
||
|
|
{{- with .Values.ldap.LDAP_CONFIG_BASE_DN }}
|
||
|
|
LDAP_CONFIG_BASE_DN: {{ . | quote }}
|
||
|
|
{{- end }}
|
||
|
|
{{- with .Values.ldap.LDAP_GROUP_BASE_DN }}
|
||
|
|
LDAP_GROUP_BASE_DN: {{ . | quote }}
|
||
|
|
{{- end }}
|
||
|
|
{{- with .Values.ldap.LDAP_GROUP_SEARCH_FILTER }}
|
||
|
|
LDAP_GROUP_SEARCH_FILTER: {{ . | quote }}
|
||
|
|
{{- end }}
|
||
|
|
{{- with .Values.ldap.LDAP_MEMBER_ATTRIBUTE_TYPE }}
|
||
|
|
LDAP_MEMBER_ATTRIBUTE_TYPE: {{ . | quote }}
|
||
|
|
{{- end }}
|
||
|
|
{{- with .Values.ldap.LDAP_GROUP_NAME_ATTRIBUTE }}
|
||
|
|
LDAP_GROUP_NAME_ATTRIBUTE: {{ . | quote }}
|
||
|
|
{{- end }}
|
||
|
|
{{- with .Values.ldap.LDAP_DEREFERENCE_ALIASES }}
|
||
|
|
LDAP_DEREFERENCE_ALIASES: {{ . | quote }}
|
||
|
|
{{- end }}
|
||
|
|
{{- if .Values.ldap.LDAP_FOLLOW_REFERRALS }}
|
||
|
|
LDAP_FOLLOW_REFERRALS: {{ .Values.ldap.LDAP_FOLLOW_REFERRALS | quote }}
|
||
|
|
{{- with .Values.ldap.LDAP_MAX_REFERRAL_HOPS }}
|
||
|
|
LDAP_MAX_REFERRAL_HOPS: {{ . | quote }}
|
||
|
|
{{- end }}
|
||
|
|
{{- end }}
|
||
|
|
{{- with .Values.ldap.LDAP_OPERATION_TIMEOUT }}
|
||
|
|
LDAP_OPERATION_TIMEOUT: {{ . | quote }}
|
||
|
|
{{- end }}
|
||
|
|
{{- end }}
|
||
|
|
{{/* SAML */}}
|
||
|
|
{{- if or .Values.saml.SAML_IDP_METADATA_URL ( and ( .Values.saml.SAML_ENTITY_ID ) ( .Values.saml.SAML_CALLBACK_URL ) ) }}
|
||
|
|
{{- with .Values.saml.SAML_IDP_METADATA_URL }}
|
||
|
|
SAML_IDP_METADATA_URL: {{ . | quote }}
|
||
|
|
{{- end }}
|
||
|
|
{{- with .Values.saml.SAML_ENTITY_ID }}
|
||
|
|
SAML_ENTITY_ID: {{ . | quote }}
|
||
|
|
{{- end }}
|
||
|
|
{{- with .Values.saml.SAML_CALLBACK_URL }}
|
||
|
|
SAML_CALLBACK_URL: {{ . | quote }}
|
||
|
|
{{- end }}
|
||
|
|
{{- with .Values.saml.SAML_IDP_URL }}
|
||
|
|
SAML_IDP_URL: {{ . | quote }}
|
||
|
|
{{- end }}
|
||
|
|
{{- if .Values.saml.SAML_STRICT }}
|
||
|
|
SAML_STRICT: {{ .Values.saml.SAML_STRICT | quote }}
|
||
|
|
{{- end }}
|
||
|
|
{{- if .Values.saml.SAML_DEBUG }}
|
||
|
|
SAML_DEBUG: {{ .Values.saml.SAML_DEBUG | quote }}
|
||
|
|
{{- end }}
|
||
|
|
{{- if .Values.saml.SAML_COMPRESS_REQUEST }}
|
||
|
|
SAML_COMPRESS_REQUEST: {{ .Values.saml.SAML_COMPRESS_REQUEST | quote }}
|
||
|
|
{{- end }}
|
||
|
|
{{- if .Values.saml.SAML_COMPRESS_RESPONSE }}
|
||
|
|
SAML_COMPRESS_RESPONSE: {{ .alues.saml.SAML_COMPRESS_RESPONSE | quote }}
|
||
|
|
{{- end }}
|
||
|
|
{{- with .Values.saml.SAML_GROUP_ATTRIBUTE }}
|
||
|
|
SAML_GROUP_ATTRIBUTE: {{ . | quote }}
|
||
|
|
{{- end }}
|
||
|
|
{{- end }}
|
||
|
|
{{/* PROXY */}}
|
||
|
|
{{- if .Values.proxy.REMOTE_IP_VALVE_ENABLED }}
|
||
|
|
REMOTE_IP_VALVE_ENABLED: {{ .Values.proxy.REMOTE_IP_VALVE_ENABLED | quote }}
|
||
|
|
{{- with .Values.proxy.PROXY_BY_HEADER }}
|
||
|
|
PROXY_BY_HEADER: {{ . | quote }}
|
||
|
|
{{- end }}
|
||
|
|
{{- with .Values.proxy.PROXY_PROTOCOL_HEADER }}
|
||
|
|
PROXY_PROTOCOL_HEADER: {{ . | quote }}
|
||
|
|
{{- end }}
|
||
|
|
{{- with .Values.proxy.PROXY_PROTOCOL_HEADER }}
|
||
|
|
PROXY_PROTOCOL_HEADER: {{ . | quote }}
|
||
|
|
{{- end }}
|
||
|
|
{{- with .Values.proxy.PROXY_IP_HEADER }}
|
||
|
|
PROXY_IP_HEADER: {{ . | quote }}
|
||
|
|
{{- end }}
|
||
|
|
{{- with .Values.proxy.PROXY_ALLOWED_IPS_REGEX }}
|
||
|
|
PROXY_ALLOWED_IPS_REGEX: {{ . | quote }}
|
||
|
|
{{- end }}
|
||
|
|
{{- end }}
|
||
|
|
{{- end -}}
|