treasuremap/kustomization.yaml at f819f6c51021d3195209ab5b8c7bbf38a204b9ad - treasuremap - OpenDev: Free Software Needs Free Tools

airship/treasuremap

Shiba, Sidney (sx3394) 7e89d65a8c Treasuremap - Dex/API server w/ Catalogue Support

This patchset introduces the VariableCatalogue and respective
Replacement transformers for the Dex/API server. It also implements the
kustomization of LDAP values through patches.

The VariableCatalogue for Dex/API server is located under
manifests/function/treasuremap-base-catalogues/utility-catalogue.yaml.

The replacement transformers for Dex HelmRelease and API server are
located at:
- Dex HelmRelease: manifests/function/dex-aio/replacements
- API Server: manifests/function/k8scontrol-ha/replacements

The API server replacement transformer is invoked when executing the
command "airshipctl phase run controlplane-ephemeral".

The dex-aio service replacement transformer is invoked when executing
the command "airshipctl phase run workload-target". During this phase
the LDAP values are also "kustomized" through patchesStrategicMerge.
Similar patch was add for the subclusters/provide-infra.
Also updated dex-aio nodeSelector to deploy pod on the worker node.

This patchset also supports the LDAP Group authentication.

It also updated
treasuremap/manifests/site/test-site/target/encrypted/results/imported/secrets.yaml
with the encrypted LDAP Binding password.

Relates-To: #135, #137, #128
Change-Id: Ie7eef44a8f0e9d02860a94a4140841d8662f8c85

2021-06-15 21:39:16 +00:00

5 lines

93 B

YAML

Raw Blame History

 resources:
   - versions-treasuremap.yaml
   - networking-ha.yaml
   - utility-treasuremap.yaml