Преглед на файлове

HUE-8888 [k8s] Add additional potential auth via ingress

Romain преди 6 години
родител
ревизия
4bb746da2d

+ 6 - 1
tools/kubernetes/helm/hue/templates/ingress-https.yaml

@@ -9,9 +9,14 @@ metadata:
     cert-manager.io/acme-challenge-type: http01
     nginx.ingress.kubernetes.io/ssl-redirect: "true"
     nginx.ingress.kubernetes.io/affinity: "cookie"
-    nginx.ingress.kubernetes.io/session-cookie-name: "hue-balancer-ingress"
+    nginx.ingress.kubernetes.io/session-cookie-name: "hue-balancer"
     nginx.ingress.kubernetes.io/session-cookie-expires: "172800"
     nginx.ingress.kubernetes.io/session-cookie-max-age: "172800"
+    {{ if .Values.ingress.hasAuth }}
+    nginx.ingress.kubernetes.io/auth-type: basic
+    nginx.ingress.kubernetes.io/auth-secret: basic-auth-gethue
+    nginx.ingress.kubernetes.io/auth-realm: 'Authentication Required'
+    {{ end }}
 spec:
   rules:
   - host: {{ .Values.ingress.domain }}

+ 1 - 0
tools/kubernetes/helm/hue/values.yaml

@@ -51,6 +51,7 @@ cron:
   emailStats: "0 13 * * WED,SUN"
 ingress:
   create: false
+  hasAuth: false
   type: "nginx"
   # type: "nginx-ssl"
   # type: "nginx-ssl-staging"

+ 5 - 0
tools/kubernetes/helm/website/templates/ingress-https.yaml

@@ -12,6 +12,11 @@ metadata:
     nginx.ingress.kubernetes.io/session-cookie-name: "gethue-website"
     nginx.ingress.kubernetes.io/session-cookie-expires: "172800"
     nginx.ingress.kubernetes.io/session-cookie-max-age: "172800"
+    {{ if .Values.ingress.hasAuth }}
+    nginx.ingress.kubernetes.io/auth-type: basic
+    nginx.ingress.kubernetes.io/auth-secret: basic-auth-gethue
+    nginx.ingress.kubernetes.io/auth-realm: 'Authentication Required'
+    {{ end }}
 spec:
   rules:
   {{ if .Values.docs.enabled }}

+ 1 - 0
tools/kubernetes/helm/website/values.yaml

@@ -17,6 +17,7 @@ monitoring:
   enabled: false
 ingress:
   create: false
+  hasAuth: false
   type: "nginx"
   # type: "nginx-ssl"
   email: "team@gethue.com"