Cloned2Preserve
/
TrueChartsClone
mirror of https://github.com/truecharts/charts.git
1
0
Fork 0
Code
TrueChartsClone/charts/stable/authentik/templates/_geoip.tpl

21 lines
654 B
Smarty
Raw Normal View History

feat(authentik): BREAKING CHANGE - Modularize it and add LDAP outpost (#3380) * fix(authentik): make it modular and maintainable * add volume mounts on worker * move geoip to container instead of cron * remove sercetkey from env and rename tpl * add initial configmap and cleanup * add rest of the config * fix geoip * add footer links config * remove empty space * finish with geoip config and ui * update UI * rename to error reporting * Add ldap outpost * add ldap healthcheck * remove proxy reference * geoip runs as root * geoip issue for heathchecks * add another todo * Give full configuration options on service and move disable/enable login in tpl and add metrics endpoints * change metrics ports of one of the containers to avoid conflicts * whitespace * add note * add notes * expose container ports for ldap * correct ports * Enable prometheus metrics for main container * disable metrics when disabled * not needed * no message * add name to container port, * make note more clear * don't micromanage services. let user do that * lint * define mail secrets only if defined * handle better few secrets * μορε * whoops * handle null * quote "null" * handle poteentialy empty strings * handle empty string * fix * move ports to configmap * move more to configmap * hmm * add placeholders to avoid empty secrets * hmm * hmm * no message * hmm? * maybe? * hmm * damn * b64enc all secrets * quote again * turn off geoip and ldap * no rofs on worker * rofs * d * test empty secret * test footer links * disable ldap for ci
2022-08-09 22:14:43 +00:00
{{/* Define the geoip container */}}
{{- define "authentik.geoip" -}}
image: {{ .Values.geoipImage.repository }}:{{ .Values.geoipImage.tag }}
feat(authentik): make manual outpost much easier for both helm and scale gui (#3679) * feat(authentik): some rework * disable built in outposts as we aim to spin our own * piping the proxy outpost * use bootstrap token for outposts * remove comments * add some docs about the token * set defaults for outposts with ability to override * add some docs * empty space * add spaces for readability * different ports for metrics * add comments for metrics * remove service from gui * rename prots * rearrange * update ports to solve conflicts * reenable outpost * turn off outposts * rearrange * try previous image * nop * major bump * add ingresses * set default $host * quote true * test with outposts enabled * update docs * try only ldap outpost * update docs * expose services of outpost to gui and values * update gui * update docs * disable outpost * update default port type * use the targetPort to set ports for metrics * flexible ports everywhere * change probe port * update probe * some quote fixes * update probes * update ports * no message * give worker more startup time * more * probes... * dont quote ports * lint * rofs * whoops * quote * see env * extract listen ports from main config * don't load listen_ports envs * use default port * try quoting differently * hardcode * try more hardcoded change * disable probes * enable 1 probe * another probe * remove trailing slash?! * again * again * test template * give more time to probes * more!? * hmm * see env vars * I"M STUPID * run * last fixies * see env * disabel startup probe * hmm * enable readiness probe * wth * load env .. * Aaaahh * fix quotting * start without worker * delay worker startup * enable worker * try something better * bash * try again * whoops * dont chain * oneliner * one more try * back to normal startup * and default startup probe
2022-09-05 21:07:41 +00:00
imagePullPolicy: {{ .Values.geoipImage.pullPolicy }}
feat(authentik): BREAKING CHANGE - Modularize it and add LDAP outpost (#3380) * fix(authentik): make it modular and maintainable * add volume mounts on worker * move geoip to container instead of cron * remove sercetkey from env and rename tpl * add initial configmap and cleanup * add rest of the config * fix geoip * add footer links config * remove empty space * finish with geoip config and ui * update UI * rename to error reporting * Add ldap outpost * add ldap healthcheck * remove proxy reference * geoip runs as root * geoip issue for heathchecks * add another todo * Give full configuration options on service and move disable/enable login in tpl and add metrics endpoints * change metrics ports of one of the containers to avoid conflicts * whitespace * add note * add notes * expose container ports for ldap * correct ports * Enable prometheus metrics for main container * disable metrics when disabled * not needed * no message * add name to container port, * make note more clear * don't micromanage services. let user do that * lint * define mail secrets only if defined * handle better few secrets * μορε * whoops * handle null * quote "null" * handle poteentialy empty strings * handle empty string * fix * move ports to configmap * move more to configmap * hmm * add placeholders to avoid empty secrets * hmm * hmm * no message * hmm? * maybe? * hmm * damn * b64enc all secrets * quote again * turn off geoip and ldap * no rofs on worker * rofs * d * test empty secret * test footer links * disable ldap for ci
2022-08-09 22:14:43 +00:00
securityContext:
runAsUser: 0
runAsGroup: 0
fix(authentik): geoip disable rofs (#3651)
2022-09-01 06:24:21 +00:00
readOnlyRootFilesystem: false
feat(authentik): BREAKING CHANGE - Modularize it and add LDAP outpost (#3380) * fix(authentik): make it modular and maintainable * add volume mounts on worker * move geoip to container instead of cron * remove sercetkey from env and rename tpl * add initial configmap and cleanup * add rest of the config * fix geoip * add footer links config * remove empty space * finish with geoip config and ui * update UI * rename to error reporting * Add ldap outpost * add ldap healthcheck * remove proxy reference * geoip runs as root * geoip issue for heathchecks * add another todo * Give full configuration options on service and move disable/enable login in tpl and add metrics endpoints * change metrics ports of one of the containers to avoid conflicts * whitespace * add note * add notes * expose container ports for ldap * correct ports * Enable prometheus metrics for main container * disable metrics when disabled * not needed * no message * add name to container port, * make note more clear * don't micromanage services. let user do that * lint * define mail secrets only if defined * handle better few secrets * μορε * whoops * handle null * quote "null" * handle poteentialy empty strings * handle empty string * fix * move ports to configmap * move more to configmap * hmm * add placeholders to avoid empty secrets * hmm * hmm * no message * hmm? * maybe? * hmm * damn * b64enc all secrets * quote again * turn off geoip and ldap * no rofs on worker * rofs * d * test empty secret * test footer links * disable ldap for ci
2022-08-09 22:14:43 +00:00
runAsNonRoot: false
volumeMounts:
- name: geoip
mountPath: "/usr/share/GeoIP"
envFrom:
- secretRef:
name: '{{ include "tc.common.names.fullname" . }}-geoip-secret'
- configMapRef:
name: '{{ include "tc.common.names.fullname" . }}-geoip-config'
{{/* TODO: Add healthchecks */}}
{{/* TODO: https://github.com/maxmind/geoipupdate/issues/105 */}}
{{- end -}}