Compare commits
1 Commits
| Author | SHA1 | Date | |
|---|---|---|---|
| d40c68e124 |
@@ -5,6 +5,7 @@ metadata:
|
|||||||
name: kanidm-config
|
name: kanidm-config
|
||||||
data:
|
data:
|
||||||
server.toml: |
|
server.toml: |
|
||||||
|
version = "2"
|
||||||
bindaddress = "[::]:443"
|
bindaddress = "[::]:443"
|
||||||
db_path = "/data/kanidm.db"
|
db_path = "/data/kanidm.db"
|
||||||
tls_chain = "/certs/tls.crt"
|
tls_chain = "/certs/tls.crt"
|
||||||
|
|||||||
@@ -7,7 +7,6 @@ metadata:
|
|||||||
cert-manager.io/cluster-issuer: letsencrypt
|
cert-manager.io/cluster-issuer: letsencrypt
|
||||||
traefik.ingress.kubernetes.io/router.middlewares: kube-system-https-redirect@kubernetescrd
|
traefik.ingress.kubernetes.io/router.middlewares: kube-system-https-redirect@kubernetescrd
|
||||||
traefik.ingress.kubernetes.io/service.serversscheme: https
|
traefik.ingress.kubernetes.io/service.serversscheme: https
|
||||||
traefik.ingress.kubernetes.io/service.serverstransport: kanidm-transport@kubernetescrd
|
|
||||||
spec:
|
spec:
|
||||||
tls:
|
tls:
|
||||||
- hosts:
|
- hosts:
|
||||||
|
|||||||
@@ -8,4 +8,3 @@ resources:
|
|||||||
- statefulset.yaml
|
- statefulset.yaml
|
||||||
- service.yaml
|
- service.yaml
|
||||||
- ingress.yaml
|
- ingress.yaml
|
||||||
- servers-transport.yaml
|
|
||||||
|
|||||||
@@ -1,7 +0,0 @@
|
|||||||
---
|
|
||||||
apiVersion: traefik.io/v1alpha1
|
|
||||||
kind: ServersTransport
|
|
||||||
metadata:
|
|
||||||
name: kanidm-transport
|
|
||||||
spec:
|
|
||||||
insecureSkipVerify: true
|
|
||||||
@@ -16,13 +16,9 @@ spec:
|
|||||||
labels:
|
labels:
|
||||||
app: kanidm
|
app: kanidm
|
||||||
spec:
|
spec:
|
||||||
securityContext:
|
|
||||||
runAsUser: 1000
|
|
||||||
runAsGroup: 1000
|
|
||||||
fsGroup: 1000
|
|
||||||
containers:
|
containers:
|
||||||
- name: kanidm
|
- name: kanidm
|
||||||
image: kanidm/server:1.9.3
|
image: kanidm/server:1.5.0
|
||||||
ports:
|
ports:
|
||||||
- containerPort: 443
|
- containerPort: 443
|
||||||
name: https
|
name: https
|
||||||
|
|||||||
Reference in New Issue
Block a user