kubernetes: move LDAP server to local ingress
All checks were successful
ci/woodpecker/push/demo-workflow Pipeline was successful
All checks were successful
ci/woodpecker/push/demo-workflow Pipeline was successful
This commit is contained in:
@ -710,10 +710,10 @@ kubectl create namespace ldap
|
|||||||
kubectl get secret wildcard-cert-secret --namespace=cert-manager -o yaml \
|
kubectl get secret wildcard-cert-secret --namespace=cert-manager -o yaml \
|
||||||
| sed 's/namespace: cert-manager/namespace: ldap/' | kubectl apply -f -
|
| sed 's/namespace: cert-manager/namespace: ldap/' | kubectl apply -f -
|
||||||
|
|
||||||
helm install ldap \
|
helm upgrade --install ldap \
|
||||||
lldap-helm-chart/ \
|
lldap-helm-chart/ -f lldap-helm-chart/values.yaml \
|
||||||
--set ingress.hosts.host=$LDAP_HOST \
|
--set ingress.hosts.host=$LDAP_HOST \
|
||||||
--set ingress.tls[0].hosts[0]=$DNSNAME \
|
--set ingress.tls[0].hosts[0]=$LDAP_HOST \
|
||||||
--set secret.lldapUserName=$LLDAP_ADMIN_USER \
|
--set secret.lldapUserName=$LLDAP_ADMIN_USER \
|
||||||
--set secret.lldapJwtSecret=$LLDAP_JWT_SECRET \
|
--set secret.lldapJwtSecret=$LLDAP_JWT_SECRET \
|
||||||
--set secret.lldapUserPass=$LLDAP_ADMIN_PASSWORD \
|
--set secret.lldapUserPass=$LLDAP_ADMIN_PASSWORD \
|
||||||
|
|||||||
@ -7,7 +7,6 @@ secret:
|
|||||||
lldapUserPass: "placeholder"
|
lldapUserPass: "placeholder"
|
||||||
lldapBaseDn: "dc=homelab,dc=local"
|
lldapBaseDn: "dc=homelab,dc=local"
|
||||||
|
|
||||||
|
|
||||||
##### pvc
|
##### pvc
|
||||||
persistence:
|
persistence:
|
||||||
enabled: true
|
enabled: true
|
||||||
@ -39,12 +38,12 @@ env:
|
|||||||
extraEnv: []
|
extraEnv: []
|
||||||
|
|
||||||
resources:
|
resources:
|
||||||
limits:
|
limits:
|
||||||
cpu: 100m
|
cpu: 100m
|
||||||
memory: 100Mi
|
memory: 100Mi
|
||||||
requests:
|
requests:
|
||||||
cpu: 50m
|
cpu: 50m
|
||||||
memory: 50M
|
memory: 50M
|
||||||
|
|
||||||
nodeSelector: {}
|
nodeSelector: {}
|
||||||
|
|
||||||
@ -59,7 +58,6 @@ image:
|
|||||||
tag: "v0.6.1"
|
tag: "v0.6.1"
|
||||||
pullPolicy: "IfNotPresent"
|
pullPolicy: "IfNotPresent"
|
||||||
|
|
||||||
|
|
||||||
#### service this is unique service, so no enabled is added as if not it wont work
|
#### service this is unique service, so no enabled is added as if not it wont work
|
||||||
service:
|
service:
|
||||||
webui:
|
webui:
|
||||||
@ -79,10 +77,11 @@ service:
|
|||||||
|
|
||||||
#####ingress
|
#####ingress
|
||||||
ingress:
|
ingress:
|
||||||
ingressClassName: "traefik"
|
ingressClassName: "nginx"
|
||||||
enabled: true
|
enabled: true
|
||||||
name: lldap-web-ingress
|
name: lldap-web-ingress
|
||||||
annotations: {}
|
annotations:
|
||||||
|
cert-manager.io/cluster-issuer: "acme-issuer"
|
||||||
labels: {}
|
labels: {}
|
||||||
hosts:
|
hosts:
|
||||||
host: "placeholder.test.com"
|
host: "placeholder.test.com"
|
||||||
@ -90,8 +89,6 @@ ingress:
|
|||||||
path: "/"
|
path: "/"
|
||||||
pathType: "Prefix"
|
pathType: "Prefix"
|
||||||
tls:
|
tls:
|
||||||
- secretName: "lldap-secret-tls"
|
- secretName: lldap-tls-cert
|
||||||
hosts:
|
hosts:
|
||||||
- "placeholder.test.com"
|
- "placeholder.test.com"
|
||||||
|
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user