From 419d3366f1bd5589de304f75cd69dfd462b83733 Mon Sep 17 00:00:00 2001 From: Sheogorath <sheogorath@shivering-isles.com> Date: Mon, 19 Feb 2024 00:52:25 +0100 Subject: [PATCH] fix(dashboard): Add oauth2-proxy settings --- clusters/k8s01/dashboard/kustomization.yaml | 1 + clusters/k8s01/dashboard/oauth2.yaml | 58 +++++++++++++++++++++ 2 files changed, 59 insertions(+) create mode 100644 clusters/k8s01/dashboard/oauth2.yaml diff --git a/clusters/k8s01/dashboard/kustomization.yaml b/clusters/k8s01/dashboard/kustomization.yaml index 3cb945dbd..3af56e120 100644 --- a/clusters/k8s01/dashboard/kustomization.yaml +++ b/clusters/k8s01/dashboard/kustomization.yaml @@ -4,6 +4,7 @@ namespace: dashboard-system resources: - certificate.yaml - ingress.yaml +- oauth2.yaml components: - ../../../shared/components/oauth2-proxy diff --git a/clusters/k8s01/dashboard/oauth2.yaml b/clusters/k8s01/dashboard/oauth2.yaml new file mode 100644 index 000000000..128c06496 --- /dev/null +++ b/clusters/k8s01/dashboard/oauth2.yaml @@ -0,0 +1,58 @@ +apiVersion: v1 +kind: Secret +metadata: + name: oauth2-proxy-override-values +stringData: + values-overrides.yaml: ENC[AES256_GCM,data:fw/NM3yh8W16ZZ/dWIaBakopZ3BdM5TJEARi81XD99qlzEcuvNcNDEV4i7lUi0TDsfKIlkENd5G5ehFEM5IALvmC8+zom7BE9kYEQoAkupPwRekL2YOMmgZos7UNvxr+n7PsuInpeVZgQF3xCZGBrwKp0i97dTfXCl9ku/gj+enbLyH3wDENx4mmG3NrCHt8rFkAuRnud4sHJIfYgxajUqYIYnQMgIG8boO3bcZCE0Qv55f+rdlXTZdR6yfhjylCdLOQ6uojeNQLvhajxbqfqrGOlejy6L5qJezOmEgf7gjO/cU/V5NRlyuQlxLpIFhWDS560rEwVFboDmMzkrASECw87ZNrEmWoKxkhpXh0l8JUiJ0FrLqiNu17/gRSEMmVHT9K+jInGZbAEixOI8L4B/YxIEwlq2hKm7gPT9fuP/uxM0qU6jRmL/wcGfXyoLwPM1AxCBuyckI78H0TWrCiH7IKVkqfQxdJJmxDhJL9QKUY/qNXNH0SXUavgAOzxcNazJraf9HzMlQezo+iUGEKaIqMQJOZTfCSRgtDV9/7J26NPNTIw+0G570TVJcVAbDfQm0bG7PPHvIvIgcCLZCslswMyWQVzrTF9DWtyiHqyYn+mW7Wx1xLw8NbcQ==,iv:rrP61sfz0s6c4za3ocTeCftaVvK6XJZxSoN0N8fA3Dg=,tag:fC5uRVEcLrW31+r9JAUxCQ==,type:str] +sops: + kms: [] + gcp_kms: [] + azure_kv: [] + hc_vault: [] + age: [] + lastmodified: "2024-02-18T23:52:11Z" + mac: ENC[AES256_GCM,data:uVkPU0aVBbUDKVY2SXYNmBIHwD57v1tyWbcYRiWl1XAZVGol8vkvAHvj3ubJe95H7LaZgxs+nCiX6cC6vHlbJhohVEsntwKkXSvAcLGH2CIghpoA/wyzp91v3b2FLHffTMHEdWN/zUu0zdSyRHAh5qPI/OVroPBMhXaqRbaz34Q=,iv:9RMa4X6eTmpyogp8QxIsxsXJbV91fPNVXMJovmajV84=,tag:HpmJjw97CLdbZ+4C+xQUbg==,type:str] + pgp: + - created_at: "2022-01-22T04:06:16Z" + enc: |- + -----BEGIN PGP MESSAGE----- + + wcFMA7kpg2bgzVHcAQ/8DtHV4tRlMZL4C6OcgQen2NquSYzer57mGJqORtoUPT47 + ZQ5zyNk5ZYpOImabKO74uXm9RiN2f2puMUpiXyxqrk4KuygJc1nTjBcJ18Wu7Kki + ekqldWysZauPiOHsnFJeARtf5foii/e7cYfSWVqry0zszHWVOHt8FzrSLpogvQM5 + 0T1wVS5EwIvGXcFpeMpylzAJiC97JyT7sk6yxu7Ma0uDGMdriayraQrO3XgY5wYt + ZhY05mzwq7VQXpIdMx+WOQRNMCaNM9VSFb5m13JsJAhZ6IhwVsZrYRtvuEm8gUYe + heUeDkny3DKBc1B5wRdxQCFsqwh0OeeYBW9MJJ+PAwl+nBYH1FVmr20+7nKETgfm + W/onZYFYlKIOJlqCY6EOLjBNq7bSjRYNIr+OZS7zXV2MkOnWM3r0lKg3L6jPexks + OECWLjDAIP/B7fD/Np/2uW7/8DvqgIIvX5kgRmXqeI0k5SNq9P7hmFZYOeg+QA48 + ZbVdpoKZ5oWICubohJZRcDMwSOowSp66d1jrRSRhfaWaX6jRMrZ+J+rM+7+OB2Er + OlyMV7Jymc8ziKIECwOGEf1L1orQKfRi8B3ilwDztMAw2G8KLxkeNjKkMoXs8ACg + fMJ2PpykOUzRWgBZ5EVN0AIhIG9NVszajW7JZSIr1N2WxyapGgFG3XzkOVxgilzS + UQEl93Bz48D02p2xV91B9cV2s7T0q22rueTGh+3hduNnV4AnW96Q+BVlwkBf3Ce9 + Sg1NwTNa9dc1/bHy6mXtH6LmWULFwy2HcbOHpuM/CzTQSg== + =z7dj + -----END PGP MESSAGE----- + fp: 286791FB6648539775DB31B8FCB98C2A3EC6F601 + - created_at: "2022-01-22T04:06:16Z" + enc: | + -----BEGIN PGP MESSAGE----- + + hQIMA4oYbIHZIrAPAQ//VLaNfwAisdkWTqGX7Vs7x5qpcg8teAE+wPyn1SWaiJQM + HODq7IUBggPcxB9j0kSQWXVHKYDCkqvm/3Zsi1Xb6/Gwso1Rt7MXAEx7Ycg2RKC0 + a40B2la89UobL91Ebcj5CCysrnqKIYC0JMH2Yjv2fyRn2vYzM0EbWuyqQsFIwmqS + gKA/xh1+bn7sbcDlzocvFXiMRVZRn1IItOfIHxxN2bUW4eFASUNePGMLDapOjzmz + Wignho60mTbcohrN7kMaubllyNjgWHzvE/QVTeWRe8QJwJ+BpinApJxpIq5LNuYD + MEoU09AAWCSPhatinBaI15eq9hsvEEx7WV+usD2dSEtFuGrwVZjcW+QABdy0SOV/ + aCNfcVDF0q+Jh3ISj8IPV95d8Pc8thiA07PPi6lWTyAyUAP1aQ45xsl/nRp+bFcr + xEpkjn8K+buwdgXXS4/KApbWU+fGoFLBO+9ZeXSqRBisQLMQY5W/bizhw33UIA0x + LJlL+tFxtlWJdRr8Tayww00xudz054QPe29pjgL5m64ZAH1aPug6A4dM1AgiuR5U + sxZx3ztBoUIpG/F3bVC6gJaabnvBKtLN+3qsE1JMvLg/Zqa7WRN7n9tshWbErD1N + B6yjpLfJXI9AqvmdoYuIUbdOARSAH5kH+m/yW20Ci0IqDgUcnoQ9Ec73q44ww9XU + aAEJAhAL66h/Wywpk/w8S/MmAKkkOUSVrtssQivPcfsD/KRIoc0+YZL4H2pEHKHh + p93zEgROxcJ0DKGLtTrmBRJPKFcDPxImK46r89SNSZ7FaobJaQ7NiON9Q+3scxfH + 5K8F3nYuIxuX + =P8/A + -----END PGP MESSAGE----- + fp: B137EE1549DFAF960DD1E2B15147025FB9F09E07 + encrypted_regex: ^(data|stringData|email|dnsZones?|dnsNames?|hosts?|tang|externalURL|.*-secret|.*-url|.*Secret|.*-domain)$ + version: 3.7.3 -- GitLab