mirror of
https://github.com/helm/charts.git
synced 2026-08-23 22:37:45 +00:00
Pete Brown
af218b08ae
* Add nginx-ldapauth-proxy We created this as an authentication layer on top of our ELK stack. We thought it might be useful for other people as well. * Add sources and github usernames * Fix API version for deployment Add spec.selector matchlabels * Add release to selector matchLabels * Update metadata to nre release * Use new template for chart label * Fix app matchlabels for deployment * Move nginx-ldapauth-proxy to stable * Change default proxy service to kubernetes.default * Only enable ldap auth if ldapHost and ldapBindPassword are set * Make sure / is available * Add stub_status to status location in nginx * Remove superfluous $
62 lines
1.6 KiB
YAML
62 lines
1.6 KiB
YAML
# Default values for nginx-ldapauth-proxy.
|
|
# This is a YAML-formatted file.
|
|
# Declare variables to be passed into your templates.
|
|
replicaCount: 1
|
|
image:
|
|
repository: dweomer/nginx-auth-ldap
|
|
tag: 1.13.5-on-alpine-3.5
|
|
pullPolicy: IfNotPresent
|
|
# pullSecrets:
|
|
# - docker-secret
|
|
service:
|
|
name: nginx-ldapauth
|
|
type: ClusterIP
|
|
externalPort: 443
|
|
internalPort: 80
|
|
proxy:
|
|
port: 443
|
|
host: "kubernetes.default.svc.cluster.local"
|
|
authName: "Auth Required"
|
|
ldapHost: ""
|
|
ldapPort: 389
|
|
ldapGroup: "memberUid"
|
|
ldapDN: "dc=example,dc=com"
|
|
ldapFilter: "objectClass=organizationalPerson"
|
|
ldapBindDN: "cn=auth,dc=example,dc=com"
|
|
requires:
|
|
- name: "authGroup"
|
|
filter: "cn=secret,ou=groups,dc=example,dc=com"
|
|
secrets:
|
|
ldapBindPassword: ""
|
|
|
|
ingress:
|
|
enabled: false
|
|
# Used to create an Ingress record.
|
|
hosts:
|
|
- ldapauth-service.local
|
|
annotations:
|
|
# kubernetes.io/ingress.class: nginx
|
|
# kubernetes.io/tls-acme: "true"
|
|
tls:
|
|
# Secrets must be manually created in the namespace.
|
|
# - secretName: chart-example-tls
|
|
# hosts:
|
|
# - chart-example.local
|
|
resources: {}
|
|
# We usually recommend not to specify default resources and to leave this as a conscious
|
|
# choice for the user. This also increases chances charts run on environments with little
|
|
# resources, such as Minikube. If you do want to specify resources, uncomment the following
|
|
# lines, adjust them as necessary, and remove the curly braces after 'resources:'.
|
|
# limits:
|
|
# cpu: 100m
|
|
# memory: 128Mi
|
|
# requests:
|
|
# cpu: 100m
|
|
# memory: 128Mi
|
|
|
|
nodeSelector: {}
|
|
|
|
tolerations: []
|
|
|
|
affinity: {}
|