add authelia in dev mode but then disabled because didnt get it to solve my problem [ci skip]
This commit is contained in:
parent
c684b321cc
commit
9e568496be
4 changed files with 169 additions and 39 deletions
|
|
@ -15,14 +15,163 @@ module "tls_secret" {
|
|||
tls_secret_name = var.tls_secret_name
|
||||
}
|
||||
|
||||
resource "helm_release" "authelia" {
|
||||
namespace = "authelia"
|
||||
create_namespace = true
|
||||
name = "authelia"
|
||||
atomic = true
|
||||
# resource "helm_release" "authelia" {
|
||||
# namespace = "authelia"
|
||||
# create_namespace = true
|
||||
# name = "authelia"
|
||||
# atomic = true
|
||||
|
||||
repository = "https://charts.authelia.com"
|
||||
chart = "authelia"
|
||||
# repository = "https://charts.authelia.com"
|
||||
# chart = "authelia"
|
||||
# version = "4.38.9"
|
||||
|
||||
values = [templatefile("${path.module}/values.yaml", {})]
|
||||
# values = [templatefile("${path.module}/values.yaml", {})]
|
||||
# }
|
||||
|
||||
resource "kubernetes_config_map" "configuration" {
|
||||
metadata {
|
||||
name = "configuration"
|
||||
namespace = "authelia"
|
||||
|
||||
labels = {
|
||||
app = "configuration"
|
||||
}
|
||||
annotations = {
|
||||
"reloader.stakater.com/match" = "true"
|
||||
}
|
||||
}
|
||||
|
||||
data = {
|
||||
# "configuration.yml" = yamldecode(file("${path.module}/configuration.yml"))
|
||||
"configuration.yml" = file("${path.module}/configuration.yml")
|
||||
"users_database.yml" = file("${path.module}/users_database.yml")
|
||||
}
|
||||
}
|
||||
|
||||
|
||||
resource "kubernetes_deployment" "authelia" {
|
||||
metadata {
|
||||
name = "authelia"
|
||||
namespace = "authelia"
|
||||
labels = {
|
||||
app = "authelia"
|
||||
}
|
||||
annotations = {
|
||||
"reloader.stakater.com/search" = "true"
|
||||
}
|
||||
}
|
||||
spec {
|
||||
replicas = 1
|
||||
selector {
|
||||
match_labels = {
|
||||
app = "authelia"
|
||||
}
|
||||
}
|
||||
template {
|
||||
metadata {
|
||||
labels = {
|
||||
app = "authelia"
|
||||
}
|
||||
}
|
||||
spec {
|
||||
container {
|
||||
image = "authelia/authelia:4.38"
|
||||
name = "authelia"
|
||||
# command = ["tail", "-f", "/etc/passwd"]
|
||||
|
||||
port {
|
||||
container_port = 9091
|
||||
}
|
||||
port {
|
||||
container_port = 8080
|
||||
}
|
||||
volume_mount {
|
||||
name = "config"
|
||||
# mount_path = "/etc/authelia/configuration.yml"
|
||||
mount_path = "/config/configuration.yml"
|
||||
sub_path = "configuration.yml"
|
||||
}
|
||||
volume_mount {
|
||||
name = "users-database"
|
||||
# mount_path = "/etc/authelia/users_database.yml"
|
||||
mount_path = "/config/users_database.yml"
|
||||
sub_path = "users_database.yml"
|
||||
}
|
||||
}
|
||||
volume {
|
||||
name = "config"
|
||||
config_map {
|
||||
name = "configuration"
|
||||
}
|
||||
}
|
||||
volume {
|
||||
name = "users-database"
|
||||
config_map {
|
||||
name = "configuration"
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
resource "kubernetes_service" "authelia" {
|
||||
metadata {
|
||||
name = "authelia"
|
||||
namespace = "authelia"
|
||||
labels = {
|
||||
"app" = "authelia"
|
||||
}
|
||||
}
|
||||
|
||||
spec {
|
||||
selector = {
|
||||
app = "authelia"
|
||||
}
|
||||
port {
|
||||
name = "http"
|
||||
port = 80
|
||||
protocol = "TCP"
|
||||
# target_port = 8080
|
||||
target_port = 9091
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
resource "kubernetes_ingress_v1" "authelia" {
|
||||
metadata {
|
||||
name = "authelia"
|
||||
namespace = "authelia"
|
||||
annotations = {
|
||||
"kubernetes.io/ingress.class" = "nginx"
|
||||
# "nginx.ingress.kubernetes.io/affinity" = "cookie"
|
||||
# "nginx.ingress.kubernetes.io/auth-tls-verify-client" = "on"
|
||||
# "nginx.ingress.kubernetes.io/auth-tls-secret" = "default/ca-secret"
|
||||
# "nginx.ingress.kubernetes.io/auth-url" : "https://oauth2.viktorbarzin.me/oauth2/auth"
|
||||
# "nginx.ingress.kubernetes.io/auth-signin" : "https://oauth2.viktorbarzin.me/oauth2/start?rd=/redirect/$http_host$escaped_request_uri"
|
||||
}
|
||||
}
|
||||
|
||||
spec {
|
||||
tls {
|
||||
hosts = ["auth.viktorbarzin.me"]
|
||||
secret_name = var.tls_secret_name
|
||||
}
|
||||
rule {
|
||||
host = "auth.viktorbarzin.me"
|
||||
http {
|
||||
path {
|
||||
path = "/"
|
||||
backend {
|
||||
service {
|
||||
name = "authelia"
|
||||
port {
|
||||
number = 80
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
|
|
|||
10
modules/kubernetes/authelia/users_database.yml
Normal file
10
modules/kubernetes/authelia/users_database.yml
Normal file
|
|
@ -0,0 +1,10 @@
|
|||
users:
|
||||
authelia:
|
||||
disabled: false
|
||||
displayname: "Viktor"
|
||||
# Password is authelia
|
||||
password: "$6$rounds=50000$BpLnfgDsc2WD8F2q$Zis.ixdg9s/UOJYrs56b5QEZFiZECu0qZVNsIYxBaNJ7ucIL.nlxVCT5tqh8KHG8X4tlwCFm5r6NTOZZ5qRFN/" # yamllint disable-line rule:line-length
|
||||
email: me@viktorbarzin.me
|
||||
groups:
|
||||
- admins
|
||||
- dev
|
||||
|
|
@ -86,11 +86,11 @@ service:
|
|||
# myLabel: myValue
|
||||
|
||||
port: 80
|
||||
nodePort: 30091
|
||||
#nodePort: 30091
|
||||
# clusterIP:
|
||||
|
||||
ingress:
|
||||
enabled: false
|
||||
enabled: true
|
||||
|
||||
annotations: {}
|
||||
# annotations:
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue