Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix(authelia): split secrets #158

Merged
merged 1 commit into from
Dec 28, 2023
Merged

fix(authelia): split secrets #158

merged 1 commit into from
Dec 28, 2023

Conversation

martinohmann
Copy link
Owner

No description provided.

@github-actions github-actions bot added the area/kubernetes Changes made in the kubernetes directory label Dec 28, 2023
Copy link

--- kubernetes/apps/default/authelia/app Kustomization: flux-system/authelia HelmRelease: default/authelia

+++ kubernetes/apps/default/authelia/app Kustomization: flux-system/authelia HelmRelease: default/authelia

@@ -46,12 +46,16 @@

               AUTHELIA_TELEMETRY_METRICS_ENABLED: 'true'
               AUTHELIA_THEME: light
               X_AUTHELIA_CONFIG: /config/configuration.yaml
               X_AUTHELIA_CONFIG_FILTERS: expand-env
             envFrom:
             - secretRef:
+                name: authelia-db
+            - secretRef:
+                name: authelia-ldap
+            - secretRef:
                 name: authelia
             image:
               repository: ghcr.io/authelia/authelia
               tag: v4.38.0-beta3@sha256:8ae6943a3f603e5e6f5bf53b6c09cd0fedc76eed09a1e09b4b6585974c416f9d
             probes:
               liveness:
@@ -91,13 +95,13 @@

                 - ALL
               readOnlyRootFilesystem: true
         initContainers:
           init-db:
             envFrom:
             - secretRef:
-                name: authelia
+                name: authelia-db
             image:
               repository: ghcr.io/onedr0p/postgres-init
               tag: 16
         pod:
           enableServiceLinks: false
           securityContext:

Copy link

--- HelmRelease: default/authelia Deployment: default/authelia

+++ HelmRelease: default/authelia Deployment: default/authelia

@@ -45,13 +45,13 @@

         maxSkew: 1
         topologyKey: kubernetes.io/hostname
         whenUnsatisfiable: DoNotSchedule
       initContainers:
       - envFrom:
         - secretRef:
-            name: authelia
+            name: authelia-db
         image: ghcr.io/onedr0p/postgres-init:16
         name: init-db
         volumeMounts:
         - mountPath: /config/configuration.yaml
           name: config
           readOnly: true
@@ -70,12 +70,16 @@

           value: light
         - name: X_AUTHELIA_CONFIG
           value: /config/configuration.yaml
         - name: X_AUTHELIA_CONFIG_FILTERS
           value: expand-env
         envFrom:
+        - secretRef:
+            name: authelia-db
+        - secretRef:
+            name: authelia-ldap
         - secretRef:
             name: authelia
         image: ghcr.io/authelia/authelia:v4.38.0-beta3@sha256:8ae6943a3f603e5e6f5bf53b6c09cd0fedc76eed09a1e09b4b6585974c416f9d
         livenessProbe:
           failureThreshold: 3
           httpGet:

@martinohmann martinohmann merged commit 89bd47a into main Dec 28, 2023
4 checks passed
@martinohmann martinohmann deleted the fix-authelia-secrets branch December 28, 2023 12:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area/kubernetes Changes made in the kubernetes directory
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant