Compare commits
3 Commits
| Author | SHA1 | Date | |
|---|---|---|---|
| a90f43b415 | |||
| 1fb779255f | |||
| 93856cc30e |
@@ -0,0 +1,46 @@
|
|||||||
|
---
|
||||||
|
apiVersion: traefik.io/v1alpha1
|
||||||
|
kind: Middleware
|
||||||
|
metadata:
|
||||||
|
name: auth-proxy
|
||||||
|
spec:
|
||||||
|
forwardAuth:
|
||||||
|
address: http://auth-proxy.auth-proxy.svc:80/auth
|
||||||
|
trustForwardHeader: true
|
||||||
|
authResponseHeaders:
|
||||||
|
- X-Auth-Request-User
|
||||||
|
- X-Auth-Request-Email
|
||||||
|
- X-Auth-Request-Groups
|
||||||
|
---
|
||||||
|
apiVersion: traefik.io/v1alpha1
|
||||||
|
kind: IngressRoute
|
||||||
|
metadata:
|
||||||
|
name: secret-reader
|
||||||
|
annotations:
|
||||||
|
cert-manager.io/cluster-issuer: letsencrypt
|
||||||
|
spec:
|
||||||
|
entryPoints:
|
||||||
|
- websecure
|
||||||
|
routes:
|
||||||
|
- match: Host(`pass.hexor.cy`)
|
||||||
|
kind: Rule
|
||||||
|
middlewares:
|
||||||
|
- name: auth-proxy
|
||||||
|
services:
|
||||||
|
- name: secret-reader
|
||||||
|
port: 80
|
||||||
|
tls:
|
||||||
|
secretName: secret-reader-tls
|
||||||
|
---
|
||||||
|
apiVersion: cert-manager.io/v1
|
||||||
|
kind: Certificate
|
||||||
|
metadata:
|
||||||
|
name: secret-reader-tls
|
||||||
|
spec:
|
||||||
|
secretName: secret-reader-tls
|
||||||
|
issuerRef:
|
||||||
|
name: letsencrypt
|
||||||
|
kind: ClusterIssuer
|
||||||
|
dnsNames:
|
||||||
|
- pass.hexor.cy
|
||||||
|
|
||||||
@@ -0,0 +1,12 @@
|
|||||||
|
apiVersion: kustomize.config.k8s.io/v1beta1
|
||||||
|
kind: Kustomization
|
||||||
|
|
||||||
|
resources:
|
||||||
|
- ./app.yaml
|
||||||
|
- ./deployment.yaml
|
||||||
|
- ./external-secret.yaml
|
||||||
|
- ./ingress.yaml
|
||||||
|
- ./kustomization.yaml
|
||||||
|
- ./rbac.yaml
|
||||||
|
- ./service-account.yaml
|
||||||
|
- ./service.yaml
|
||||||
@@ -35,7 +35,7 @@ spec:
|
|||||||
- name: AUTH_PROXY_ROUTES_FILE
|
- name: AUTH_PROXY_ROUTES_FILE
|
||||||
value: "/config/routes.yaml"
|
value: "/config/routes.yaml"
|
||||||
- name: AUTH_PROXY_LOG_LEVEL
|
- name: AUTH_PROXY_LOG_LEVEL
|
||||||
value: "info"
|
value: "debug"
|
||||||
volumeMounts:
|
volumeMounts:
|
||||||
- name: routes
|
- name: routes
|
||||||
mountPath: /config
|
mountPath: /config
|
||||||
|
|||||||
Reference in New Issue
Block a user