Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

archives lldap in favor of glauth #265

Merged
merged 1 commit into from
Apr 3, 2024
Merged

archives lldap in favor of glauth #265

merged 1 commit into from
Apr 3, 2024

Conversation

chrisbsmith
Copy link
Owner

No description provided.

Copy link

github-actions bot commented Apr 3, 2024

--- kubernetes/apps/auth/authelia/app Kustomization: flux-system/authelia HelmRelease: auth/authelia

+++ kubernetes/apps/auth/authelia/app Kustomization: flux-system/authelia HelmRelease: auth/authelia

@@ -15,13 +15,13 @@

       sourceRef:
         kind: HelmRepository
         name: bjw-s
         namespace: flux-system
       version: 3.0.4
   dependsOn:
-  - name: lldap
+  - name: glauth
     namespace: auth
   - name: redis
     namespace: database
   install:
     remediation:
       retries: 3
--- kubernetes/apps Kustomization: flux-system/cluster-apps Kustomization: flux-system/lldap

+++ kubernetes/apps Kustomization: flux-system/cluster-apps Kustomization: flux-system/lldap

@@ -1,40 +0,0 @@

----
-apiVersion: kustomize.toolkit.fluxcd.io/v1
-kind: Kustomization
-metadata:
-  labels:
-    kustomize.toolkit.fluxcd.io/name: cluster-apps
-    kustomize.toolkit.fluxcd.io/namespace: flux-system
-  name: lldap
-  namespace: flux-system
-spec:
-  commonMetadata:
-    labels:
-      app.kubernetes.io/name: lldap
-  decryption:
-    provider: sops
-    secretRef:
-      name: sops-age
-  interval: 30m
-  path: ./kubernetes/apps/auth/lldap/app
-  postBuild:
-    substitute:
-      APP: lldap
-    substituteFrom:
-    - kind: ConfigMap
-      name: cluster-settings
-    - kind: Secret
-      name: cluster-secrets
-    - kind: ConfigMap
-      name: cluster-settings-user
-    - kind: Secret
-      name: cluster-secrets-user
-  prune: true
-  retryInterval: 1m
-  sourceRef:
-    kind: GitRepository
-    name: home-kubernetes
-  targetNamespace: auth
-  timeout: 5m
-  wait: true
-
--- kubernetes/apps/auth/lldap/app Kustomization: flux-system/lldap ExternalSecret: auth/lldap

+++ kubernetes/apps/auth/lldap/app Kustomization: flux-system/lldap ExternalSecret: auth/lldap

@@ -1,39 +0,0 @@

----
-apiVersion: external-secrets.io/v1beta1
-kind: ExternalSecret
-metadata:
-  labels:
-    app.kubernetes.io/name: lldap
-    kustomize.toolkit.fluxcd.io/name: lldap
-    kustomize.toolkit.fluxcd.io/namespace: flux-system
-  name: lldap
-  namespace: auth
-spec:
-  dataFrom:
-  - extract:
-      key: lldap
-  - extract:
-      key: cloudnative-pg
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: onepassword-connect
-  target:
-    creationPolicy: Owner
-    name: lldap-secret
-    template:
-      data:
-        INIT_POSTGRES_DBNAME: lldap
-        INIT_POSTGRES_HOST: postgres16-rw.database.svc.cluster.local
-        INIT_POSTGRES_PASS: '{{ .LLDAP_POSTGRES_PASS }}'
-        INIT_POSTGRES_SUPER_PASS: '{{ .POSTGRES_SUPER_PASS }}'
-        INIT_POSTGRES_USER: '{{ .LLDAP_POSTGRES_USER }}'
-        LLDAP_DATABASE_URL: postgres://{{ .LLDAP_POSTGRES_USER }}:{{ .LLDAP_POSTGRES_PASS
-          }}@postgres16-rw.database.svc.cluster.local/lldap
-        LLDAP_JWT_SECRET: '{{ .LLDAP_JWT_SECRET }}'
-        LLDAP_LDAP_BASE_DN: '{{ .LLDAP_LDAP_BASE_DN }}'
-        LLDAP_LDAP_USER_DN: '{{ .LLDAP_LDAP_USER_DN }}'
-        LLDAP_LDAP_USER_EMAIL: '{{ .LLDAP_LDAP_USER_EMAIL }}'
-        LLDAP_LDAP_USER_PASS: '{{ .LLDAP_LDAP_USER_PASS }}'
-        LLDAP_SERVER_KEY_SEED: '{{ .LLDAP_SERVER_KEY_SEED }}'
-      engineVersion: v2
-
--- kubernetes/apps/auth/lldap/app Kustomization: flux-system/lldap HelmRelease: auth/lldap

+++ kubernetes/apps/auth/lldap/app Kustomization: flux-system/lldap HelmRelease: auth/lldap

@@ -1,99 +0,0 @@

----
-apiVersion: helm.toolkit.fluxcd.io/v2beta2
-kind: HelmRelease
-metadata:
-  labels:
-    app.kubernetes.io/name: lldap
-    kustomize.toolkit.fluxcd.io/name: lldap
-    kustomize.toolkit.fluxcd.io/namespace: flux-system
-  name: lldap
-  namespace: auth
-spec:
-  chart:
-    spec:
-      chart: app-template
-      sourceRef:
-        kind: HelmRepository
-        name: bjw-s
-        namespace: flux-system
-      version: 3.0.4
-  install:
-    remediation:
-      retries: 3
-  interval: 30m
-  maxHistory: 2
-  uninstall:
-    keepHistory: false
-  upgrade:
-    cleanupOnFail: true
-    remediation:
-      retries: 3
-  values:
-    controllers:
-      lldap:
-        annotations:
-          reloader.stakater.com/auto: 'true'
-        containers:
-          app:
-            env:
-              LLDAP_HTTP_PORT: 80
-              LLDAP_HTTP_URL: https://lldap.
-              LLDAP_LDAP_PORT: 389
-              TZ: America/New_York
-            envFrom:
-            - secretRef:
-                name: lldap-secret
-            image:
-              repository: ghcr.io/lldap/lldap
-              tag: v0.5.0
-            resources:
-              limits:
-                memory: 128M
-              requests:
-                cpu: 5m
-                memory: 36M
-        initContainers:
-          init-db:
-            envFrom:
-            - secretRef:
-                name: lldap-secret
-            image:
-              pullPolicy: IfNotPresent
-              repository: ghcr.io/onedr0p/postgres-init
-              tag: 16
-        pod:
-          topologySpreadConstraints:
-          - labelSelector:
-              matchLabels:
-                app.kubernetes.io/name: lldap
-            maxSkew: 1
-            topologyKey: kubernetes.io/hostname
-            whenUnsatisfiable: DoNotSchedule
-        replicas: 2
-        strategy: RollingUpdate
-    ingress:
-      app:
-        className: internal
-        enabled: true
-        hosts:
-        - host: '{{ .Release.Name }}.'
-          paths:
-          - path: /
-            service:
-              identifier: app
-              port: http
-        tls:
-        - hosts:
-          - '{{ .Release.Name }}.'
-    persistence:
-      data:
-        type: emptyDir
-    service:
-      app:
-        controller: lldap
-        ports:
-          http:
-            port: 80
-          ldap:
-            port: 389
-
--- kubernetes/apps/auth/lldap/app Kustomization: flux-system/lldap ConfigMap: auth/lldap-gatus-ep

+++ kubernetes/apps/auth/lldap/app Kustomization: flux-system/lldap ConfigMap: auth/lldap-gatus-ep

@@ -1,27 +0,0 @@

----
-apiVersion: v1
-data:
-  config.yaml: |-
-    endpoints:
-      - name: "lldap"
-        group: internal
-        url: "https://lldap."
-        interval: 1m
-        ui:
-          hide-hostname: true
-          hide-url: true
-        conditions:
-          - "[STATUS] < 300"
-          - "[RESPONSE_TIME] < 300"
-        alerts:
-          - type: pushover
-kind: ConfigMap
-metadata:
-  labels:
-    app.kubernetes.io/name: lldap
-    gatus.io/enabled: 'true'
-    kustomize.toolkit.fluxcd.io/name: lldap
-    kustomize.toolkit.fluxcd.io/namespace: flux-system
-  name: lldap-gatus-ep
-  namespace: auth
-

Copy link

github-actions bot commented Apr 3, 2024

--- HelmRelease: auth/lldap Service: auth/lldap

+++ HelmRelease: auth/lldap Service: auth/lldap

@@ -1,26 +0,0 @@

----
-apiVersion: v1
-kind: Service
-metadata:
-  name: lldap
-  labels:
-    app.kubernetes.io/instance: lldap
-    app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/name: lldap
-    app.kubernetes.io/service: lldap
-spec:
-  type: ClusterIP
-  ports:
-  - port: 80
-    targetPort: 80
-    protocol: TCP
-    name: http
-  - port: 389
-    targetPort: 389
-    protocol: TCP
-    name: ldap
-  selector:
-    app.kubernetes.io/component: lldap
-    app.kubernetes.io/instance: lldap
-    app.kubernetes.io/name: lldap
-
--- HelmRelease: auth/lldap Deployment: auth/lldap

+++ HelmRelease: auth/lldap Deployment: auth/lldap

@@ -1,81 +0,0 @@

----
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: lldap
-  labels:
-    app.kubernetes.io/component: lldap
-    app.kubernetes.io/instance: lldap
-    app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/name: lldap
-  annotations:
-    reloader.stakater.com/auto: 'true'
-spec:
-  revisionHistoryLimit: 3
-  replicas: 2
-  strategy:
-    type: RollingUpdate
-  selector:
-    matchLabels:
-      app.kubernetes.io/component: lldap
-      app.kubernetes.io/name: lldap
-      app.kubernetes.io/instance: lldap
-  template:
-    metadata:
-      labels:
-        app.kubernetes.io/component: lldap
-        app.kubernetes.io/instance: lldap
-        app.kubernetes.io/name: lldap
-    spec:
-      enableServiceLinks: false
-      serviceAccountName: default
-      automountServiceAccountToken: true
-      hostIPC: false
-      hostNetwork: false
-      hostPID: false
-      dnsPolicy: ClusterFirst
-      topologySpreadConstraints:
-      - labelSelector:
-          matchLabels:
-            app.kubernetes.io/name: lldap
-        maxSkew: 1
-        topologyKey: kubernetes.io/hostname
-        whenUnsatisfiable: DoNotSchedule
-      initContainers:
-      - envFrom:
-        - secretRef:
-            name: lldap-secret
-        image: ghcr.io/onedr0p/postgres-init:16
-        imagePullPolicy: IfNotPresent
-        name: init-db
-        volumeMounts:
-        - mountPath: /data
-          name: data
-      containers:
-      - env:
-        - name: LLDAP_HTTP_PORT
-          value: '80'
-        - name: LLDAP_HTTP_URL
-          value: https://lldap.
-        - name: LLDAP_LDAP_PORT
-          value: '389'
-        - name: TZ
-          value: America/New_York
-        envFrom:
-        - secretRef:
-            name: lldap-secret
-        image: ghcr.io/lldap/lldap:v0.5.0
-        name: app
-        resources:
-          limits:
-            memory: 128M
-          requests:
-            cpu: 5m
-            memory: 36M
-        volumeMounts:
-        - mountPath: /data
-          name: data
-      volumes:
-      - emptyDir: {}
-        name: data
-
--- HelmRelease: auth/lldap Ingress: auth/lldap

+++ HelmRelease: auth/lldap Ingress: auth/lldap

@@ -1,26 +0,0 @@

----
-apiVersion: networking.k8s.io/v1
-kind: Ingress
-metadata:
-  name: lldap
-  labels:
-    app.kubernetes.io/instance: lldap
-    app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/name: lldap
-spec:
-  ingressClassName: internal
-  tls:
-  - hosts:
-    - lldap.
-  rules:
-  - host: lldap.
-    http:
-      paths:
-      - path: /
-        pathType: Prefix
-        backend:
-          service:
-            name: lldap
-            port:
-              number: 80
-

@chrisbsmith chrisbsmith merged commit 690b593 into main Apr 3, 2024
5 checks passed
@delete-merged-branch delete-merged-branch bot deleted the archive-lldap branch April 3, 2024 13:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant