7e89d65a8c
This patchset introduces the VariableCatalogue and respective Replacement transformers for the Dex/API server. It also implements the kustomization of LDAP values through patches. The VariableCatalogue for Dex/API server is located under manifests/function/treasuremap-base-catalogues/utility-catalogue.yaml. The replacement transformers for Dex HelmRelease and API server are located at: - Dex HelmRelease: manifests/function/dex-aio/replacements - API Server: manifests/function/k8scontrol-ha/replacements The API server replacement transformer is invoked when executing the command "airshipctl phase run controlplane-ephemeral". The dex-aio service replacement transformer is invoked when executing the command "airshipctl phase run workload-target". During this phase the LDAP values are also "kustomized" through patchesStrategicMerge. Similar patch was add for the subclusters/provide-infra. Also updated dex-aio nodeSelector to deploy pod on the worker node. This patchset also supports the LDAP Group authentication. It also updated treasuremap/manifests/site/test-site/target/encrypted/results/imported/secrets.yaml with the encrypted LDAP Binding password. Relates-To: #135, #137, #128 Change-Id: Ie7eef44a8f0e9d02860a94a4140841d8662f8c85
35 lines
819 B
JSON
35 lines
819 B
JSON
[
|
|
{
|
|
"op": "add",
|
|
"path": "/spec/kubeadmConfigSpec/clusterConfiguration/apiServer/extraVolumes",
|
|
"value": [
|
|
{
|
|
"hostPath": "/etc/kubernetes/certs/dex-cert",
|
|
"mountPath": "/etc/kubernetes/certs/dex-cert",
|
|
"name": "dex-cert",
|
|
"readOnly": true
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"op": "add",
|
|
"path": "/spec/kubeadmConfigSpec/files/-",
|
|
"value": {
|
|
"contentFrom": {
|
|
"secret": {
|
|
"key": "tls.crt",
|
|
"name": "dex-apiserver-secret"
|
|
}
|
|
},
|
|
"owner": "root:root",
|
|
"path": "/etc/kubernetes/certs/dex-cert",
|
|
"permissions": "0644"
|
|
}
|
|
},
|
|
{
|
|
"op": "add",
|
|
"path": "/spec/kubeadmConfigSpec/preKubeadmCommands/-",
|
|
"value": "echo '10.23.25.102 dex.utility.local' | tee -a /etc/hosts"
|
|
}
|
|
]
|