github/deprecated-helm-charts
1
0
Fork 0
mirror of https://github.com/helm/charts.git synced 2026-08-23 22:37:45 +00:00
Code Issues Packages Projects Releases Wiki Activity

[stable/gangway] Add optional serviceAccount for gangway chart (#23865)

Browse Source 
* Adding ability to specify a serviceAccount to be created for gangway

Signed-off-by: Jennifer Reed <jennifer.reed@bluescape.com>

* Bumping version

Signed-off-by: Jennifer Reed <jennifer.reed@bluescape.com>

* Adding small change to simplify settings for this

Signed-off-by: Jennifer Reed <jennifer.reed@bluescape.com>

* Adding change to values.yml

Signed-off-by: Jennifer Reed <jennifer.reed@bluescape.com>

* Use empty string instead

Signed-off-by: Jennifer Reed <jennifer.reed@bluescape.com>
This commit is contained in:
Jennifer Reed
2020-10-09 14:28:49 -07:00
committed by GitHub
parent 8ac98f786f
commit bf208b2db3
5 changed files with 18 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
stable/gangway/Chart.yaml
+1 -1
View File
@@ -1,7 +1,7 @@
apiVersion: v1
description: An application that can be used to easily enable authentication flows via OIDC for a kubernetes cluster.
name: gangway
version: 0.4.2
version: 0.4.3
appVersion: 3.3.0
home: https://github.com/heptiolabs/gangway
sources:
stable/gangway/README.md
+1
View File
@@ -53,6 +53,7 @@ At a minimum you *must* configure any of the values marked as **required** in th
| `gangway.port` | The port to listen on. Defaults to 8080. | `80` |
| `gangway.redirectURL` | Where to redirect back to. This should be a URL where gangway is reachable. Typically this also needs to be registered as part of the oauth application with the oAuth provider. **Required** | `""` |
| `gangway.scopes` | Used to specify the scope of the requested Oauth authorization. | `["openid", "profile", "email", "offline_access"]` |
| `gangway.serviceAccountName` | Used to specify an alternative serviceAccount name to be created and used. If not set, default account will be used. | `""` |
| `gangway.serveTLS` | Should Gangway serve TLS vs. plain HTTP? | `false` |
| `gangway.sessionKey` | Encryption key for cookie contents. Will autogenerate if not provided. Caution: Do not use auto generation in production environments. | `""` |
| `gangway.tokenURL` | OAuth2 URL to obtain access tokens. To be taken from the configuration of your OIDC provider. **Required** | `""` |
stable/gangway/templates/deployment.yaml
+3
View File
@@ -25,6 +25,9 @@ spec:
{{ toYaml .Values.podAnnotations | trim | indent 8 }}
{{- end }}
spec:
{{- if ne .Values.gangway.serviceAccountName "" }}
serviceAccountName: {{ .Values.gangway.serviceAccountName }}
{{- end }}
{{- if .Values.image.pullSecrets }}
imagePullSecrets:
{{ toYaml .Values.image.pullSecrets | indent 8 }}
stable/gangway/templates/serviceAccount.yaml
+11
View File
@@ -0,0 +1,11 @@
{{- if ne .Values.gangway.serviceAccountName "" }}
apiVersion: v1
kind: ServiceAccount
metadata:
labels:
app.kubernetes.io/name: {{ include "gangway.name" . }}
helm.sh/chart: {{ include "gangway.chart" . }}
app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/managed-by: {{ .Release.Service }}
name: {{ .Values.gangway.serviceAccountName }}
{{- end }}
stable/gangway/values.yaml
+2
View File
@@ -30,6 +30,8 @@ gangway:
# Env var: GANGWAY_HOST
# host: 0.0.0.0
serviceAccountName: ""
# The port to listen on. Defaults to 8080.
# Env var: GANGWAY_PORT
port: 8080