Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Template and store the external IDP configurations and Dex static user store as a service configuration #2261

Closed
Ebaneck opened this issue Feb 26, 2020 · 0 comments
Assignees
Labels
topic:operations Operations-related issues

Comments

@Ebaneck
Copy link
Contributor

Ebaneck commented Feb 26, 2020

Component:

'salt', 'kubernetes', 'charts'

Why this is needed:

To guarantee the persistence of external IDP configurations and the Dex static user we provision by default, we need to store these service configurations using a ConfigMap.

What should be done:

  • For the given ConfigMap to be created, define its schema, its default values
  • Deploy the ConfigMap holding the respective Dex service configurations before the consumers are deployed.
  • Template and render the service charts(Dex) to read cluster and service configurations from the ConfigMaps directly.

Implementation proposal (strongly recommended):

Test plan:

Epic: #1996

@Ebaneck Ebaneck added topic:operations Operations-related issues topic: cluster&service configuration Anything related to cluster and service configuration persistence labels Feb 26, 2020
@Ebaneck Ebaneck removed the topic: cluster&service configuration Anything related to cluster and service configuration persistence label Feb 27, 2020
@Ebaneck Ebaneck self-assigned this Feb 28, 2020
Ebaneck added a commit that referenced this issue Feb 28, 2020
This chart is rendered using the following commmand:

./charts/render.py dex --namespace metalk8s-auth  charts/dex.yaml  --service-config dex metalk8s-dex-config  charts/dex/ >
salt/metalk8s/addons/dex/deployed/chart.sls

Closes: #2261
Ebaneck added a commit that referenced this issue Feb 28, 2020
This chart is rendered using the following commmand:

./charts/render.py dex --namespace metalk8s-auth  charts/dex.yaml  --service-config dex metalk8s-dex-config  charts/dex/ >
salt/metalk8s/addons/dex/deployed/chart.sls

Closes: #2261
Ebaneck added a commit that referenced this issue Mar 2, 2020
This chart is rendered using the following commmand:

./charts/render.py dex --namespace metalk8s-auth  charts/dex.yaml  --service-config dex metalk8s-dex-config  charts/dex/ >
salt/metalk8s/addons/dex/deployed/chart.sls

Closes: #2261
Ebaneck added a commit that referenced this issue Mar 4, 2020
This chart is rendered using the following commmand:

./charts/render.py dex --namespace metalk8s-auth  charts/dex.yaml  --service-config dex metalk8s-dex-config  charts/dex/ > salt/metalk8s/addons/dex/deployed/chart.sls

Note: The `Dex` secret automatically generated in `chart.sls`
has been replaced with `secret.sls` because we require iterating over list([]) structures
which cannot be included in `dex.yaml` before rendering using the `render.py`

Each time a user generated the `chart.sls`, the `Dex` secret yaml section
needs to be removed.

Closes: #2261
Ebaneck added a commit that referenced this issue Mar 4, 2020
This chart is rendered using the following commmand:

./charts/render.py dex --namespace metalk8s-auth  charts/dex.yaml  --service-config dex metalk8s-dex-config  charts/dex/ > salt/metalk8s/addons/dex/deployed/chart.sls

Note: The `Dex` secret automatically generated in `chart.sls`
has been replaced with `secret.sls` because we require iterating over list([]) structures
which cannot be included in `dex.yaml` before rendering using the `render.py`

Each time a user generated the `chart.sls`, the `Dex` secret yaml section
needs to be removed.

Closes: #2261
Ebaneck added a commit that referenced this issue Mar 4, 2020
This chart is rendered using the following commmand:

./charts/render.py dex --namespace metalk8s-auth  charts/dex.yaml  --service-config dex metalk8s-dex-config  charts/dex/ >
salt/metalk8s/addons/dex/deployed/chart.sls

Closes: #2261
Ebaneck added a commit that referenced this issue Mar 4, 2020
This chart is rendered using the following commmand:

./charts/render.py dex --namespace metalk8s-auth  charts/dex.yaml  --service-config dex metalk8s-dex-config  charts/dex/ >
salt/metalk8s/addons/dex/deployed/chart.sls

Closes: #2261
Ebaneck added a commit that referenced this issue Mar 5, 2020
This chart is rendered using the following commmand:

./charts/render.py dex --namespace metalk8s-auth  charts/dex.yaml  --service-config dex metalk8s-dex-config  charts/dex/ >
salt/metalk8s/addons/dex/deployed/chart.sls

Closes: #2261
@bert-e bert-e closed this as completed in d58300f Mar 6, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
topic:operations Operations-related issues
Projects
None yet
Development

No branches or pull requests

1 participant