336 lines
9.4 KiB
YAML
336 lines
9.4 KiB
YAML
# Include{groups}
|
|
questions:
|
|
# Include{global}
|
|
# Include{workload}
|
|
# Include{workloadDeployment}
|
|
# Include{replicas1}
|
|
# Include{podSpec}
|
|
# Include{containerMain}
|
|
# Include{containerBasic}
|
|
# Include{containerAdvanced}
|
|
# Include{containerConfig}
|
|
# Include{podOptions}
|
|
- variable: tfaAppOptions
|
|
group: App Configuration
|
|
label: Application Options
|
|
schema:
|
|
type: dict
|
|
attrs:
|
|
- variable: secret
|
|
label: Secret
|
|
description: Mandatory, can be any string.
|
|
schema:
|
|
type: string
|
|
required: true
|
|
private: true
|
|
- variable: port
|
|
label: Port
|
|
schema:
|
|
type: int
|
|
default: 4181
|
|
- variable: logLevel
|
|
label: Log level
|
|
schema:
|
|
type: string
|
|
default: warn
|
|
enum:
|
|
- value: trace
|
|
description: Trace (most detailed)
|
|
- value: debug
|
|
description: Debug
|
|
- value: info
|
|
description: Information
|
|
- value: warn
|
|
description: Warning
|
|
- value: error
|
|
description: Error
|
|
- value: fatal
|
|
description: Fatal
|
|
- value: panic
|
|
description: Panic (least detailed)
|
|
- variable: logFormat
|
|
label: Log format
|
|
schema:
|
|
type: string
|
|
default: text
|
|
enum:
|
|
- value: text
|
|
description: Text
|
|
- value: json
|
|
description: JSON
|
|
- value: pretty
|
|
description: Pretty
|
|
- variable: tfaAuthOptions
|
|
group: App Configuration
|
|
label: Auth Options
|
|
schema:
|
|
type: dict
|
|
attrs:
|
|
- variable: authHost
|
|
label: Auth host
|
|
description: Single host to use when returning from 3rd party auth.
|
|
schema:
|
|
type: string
|
|
- variable: urlPath
|
|
label: Callback URL Path
|
|
schema:
|
|
type: string
|
|
default: "/_oauth"
|
|
- variable: defaultAction
|
|
label: Default action
|
|
schema:
|
|
type: string
|
|
default: auth
|
|
enum:
|
|
- value: auth
|
|
description: Authenticate
|
|
- value: allow
|
|
description: Allow (do not require authentication)
|
|
- variable: defaultProvider
|
|
label: Default provider
|
|
schema:
|
|
type: string
|
|
default: google
|
|
enum:
|
|
- value: google
|
|
description: Google Provider
|
|
- value: oidc
|
|
description: OIDC Provider
|
|
- value: generic-oauth
|
|
description: Generic OAuth2 Provider
|
|
- variable: domain
|
|
label: Domains
|
|
description: Only allow given email domains.
|
|
schema:
|
|
type: list
|
|
default: []
|
|
items:
|
|
- variable: allowedDomain
|
|
label: Host
|
|
schema:
|
|
type: string
|
|
required: true
|
|
- variable: whitelist
|
|
label: Whitelist
|
|
description: Only allow given email addresses.
|
|
schema:
|
|
type: list
|
|
default: []
|
|
items:
|
|
- variable: allowedEmail
|
|
label: Host
|
|
schema:
|
|
type: string
|
|
required: true
|
|
- variable: rules
|
|
label: Rules
|
|
description: Additional rules in rule.<name>.<param>=<value> format.
|
|
schema:
|
|
type: list
|
|
default: []
|
|
items:
|
|
- variable: rule
|
|
label: Rule
|
|
schema:
|
|
type: string
|
|
required: true
|
|
- variable: logoutRedirect
|
|
label: Logout redirect
|
|
description: URL to redirect to following logout.
|
|
schema:
|
|
type: string
|
|
- variable: tfaCookieOptions
|
|
group: App Configuration
|
|
label: Cookie Options
|
|
schema:
|
|
type: dict
|
|
attrs:
|
|
- variable: cookieDomain
|
|
label: Cookie domain hosts
|
|
schema:
|
|
type: list
|
|
default: []
|
|
items:
|
|
- variable: cookieDomainHost
|
|
label: Host
|
|
schema:
|
|
type: string
|
|
required: true
|
|
- variable: cookieName
|
|
label: Cookie name
|
|
schema:
|
|
type: string
|
|
default: "_forward_auth"
|
|
- variable: csrfCookieName
|
|
label: CSRF cookie name
|
|
schema:
|
|
type: string
|
|
default: "_forward_auth_csrf"
|
|
- variable: lifetime
|
|
label: Lifetime
|
|
description: Lifetime in seconds.
|
|
schema:
|
|
type: int
|
|
default: 43200
|
|
- variable: insecureCookie
|
|
label: Use insecure cookies
|
|
schema:
|
|
type: boolean
|
|
default: false
|
|
- variable: tfaGoogleOptions
|
|
group: App Configuration
|
|
label: Google Provider
|
|
schema:
|
|
type: dict
|
|
attrs:
|
|
- variable: clientId
|
|
label: Client ID
|
|
schema:
|
|
type: string
|
|
private: true
|
|
- variable: clientSecret
|
|
label: Client Secret
|
|
schema:
|
|
type: string
|
|
private: true
|
|
- variable: prompt
|
|
label: Prompt
|
|
description: Space separated list of OpenID prompt options.
|
|
schema:
|
|
type: string
|
|
- variable: tfaOidcOptions
|
|
group: App Configuration
|
|
label: OIDC Provider
|
|
schema:
|
|
type: dict
|
|
attrs:
|
|
- variable: issuerUrl
|
|
label: Issuer URL
|
|
schema:
|
|
type: string
|
|
- variable: clientId
|
|
label: Client ID
|
|
schema:
|
|
type: string
|
|
private: true
|
|
- variable: clientSecret
|
|
label: Client Secret
|
|
schema:
|
|
type: string
|
|
private: true
|
|
- variable: resource
|
|
label: Resource
|
|
description: Optional resource indicator.
|
|
schema:
|
|
type: string
|
|
- variable: tfaOauthOptions
|
|
group: App Configuration
|
|
label: Generic OAuth2 Provider
|
|
schema:
|
|
type: dict
|
|
attrs:
|
|
- variable: authUrl
|
|
label: Auth/Login URL
|
|
schema:
|
|
type: string
|
|
- variable: tokenUrl
|
|
label: Token URL
|
|
schema:
|
|
type: string
|
|
- variable: userUrl
|
|
label: User URL
|
|
description: URL used to retrieve user info.
|
|
schema:
|
|
type: string
|
|
- variable: clientId
|
|
label: Client ID
|
|
schema:
|
|
type: string
|
|
private: true
|
|
- variable: clientSecret
|
|
label: Client Secret
|
|
schema:
|
|
type: string
|
|
private: true
|
|
- variable: scopes
|
|
label: Scopes
|
|
schema:
|
|
type: string
|
|
default: profile, email
|
|
- variable: tokenStyle
|
|
label: Token style
|
|
description: How token is presented when querying the User URL
|
|
schema:
|
|
type: string
|
|
default: header
|
|
enum:
|
|
- value: header
|
|
description: Header
|
|
- value: query
|
|
description: Query
|
|
- variable: resource
|
|
label: Resource
|
|
description: Optional resource indicator.
|
|
schema:
|
|
type: string
|
|
# Include{serviceRoot}
|
|
# Include{serviceMain}
|
|
# Include{serviceSelectorLoadBalancer}
|
|
# Include{serviceSelectorExtras}
|
|
- variable: main
|
|
label: "Main Service Port Configuration"
|
|
schema:
|
|
additional_attrs: true
|
|
type: dict
|
|
attrs:
|
|
- variable: port
|
|
label: "Port"
|
|
description: "This port exposes the container port on the service"
|
|
schema:
|
|
type: int
|
|
default: 4181
|
|
required: true
|
|
# Include{externalInterfaces}
|
|
|
|
# Include{serviceList}
|
|
# Include{persistenceList}
|
|
# Include{ingressRoot}
|
|
- variable: main
|
|
label: "Main Ingress"
|
|
schema:
|
|
additional_attrs: true
|
|
type: dict
|
|
attrs:
|
|
# Include{ingressDefault}
|
|
# Include{ingressAdvanced}
|
|
# Include{ingressList}
|
|
# Include{securityContextRoot}
|
|
- variable: runAsUser
|
|
label: "runAsUser"
|
|
description: "The UserID of the user running the application"
|
|
schema:
|
|
type: int
|
|
default: 568
|
|
- variable: runAsGroup
|
|
label: "runAsGroup"
|
|
description: "The groupID of the user running the application"
|
|
schema:
|
|
type: int
|
|
default: 568
|
|
# Include{securityContextContainer}
|
|
# Include{securityContextAdvanced}
|
|
# Include{securityContextPod}
|
|
- variable: fsGroup
|
|
label: "fsGroup"
|
|
description: "The group that should own ALL storage."
|
|
schema:
|
|
type: int
|
|
default: 568
|
|
# Include{resources}
|
|
# Include{advanced}
|
|
# Include{addons}
|
|
# Include{codeserver}
|
|
# Include{netshoot}
|
|
# Include{vpn}
|
|
# Include{documentation}
|