wrenix/helm-charts
1
0
Fork 0
Code Issues 8 Pull requests 8 Projects Packages Activity

feat(authentik-application): support own scopes for oidc

Browse source
This commit is contained in:
WrenIX 2023-12-29 16:39:05 +01:00
parent f75fede2e6
commit 182a7f9c7b
Signed by: wrenix
GPG key ID: 7AFDB012974B1BB5
7 changed files with 24 additions and 6 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
authentik-application/Chart.yaml
View file

@ -2,5 +2,5 @@ apiVersion: v2
name: authentik-application name: authentik-application
type: application type: application
version: 0.3.5 version: 0.4.0
description: "A Chart to deploy a secret for the authentik blueprint-sidecar." description: "A Chart to deploy a secret for the authentik blueprint-sidecar."

2
authentik-application/README.adoc
View file

@ -2,7 +2,7 @@
= authentik-application = authentik-application
image::https://img.shields.io/badge/Version-0.3.5-informational?style=flat-square[Version: 0.3.5] image::https://img.shields.io/badge/Version-0.4.0-informational?style=flat-square[Version: 0.4.0]
image::https://img.shields.io/badge/Version-application-informational?style=flat-square[Type: application] image::https://img.shields.io/badge/Version-application-informational?style=flat-square[Type: application]
## Pre-Requirement ## Pre-Requirement

1
authentik-application/files/groups.yaml.gotmpl
View file

@ -41,6 +41,7 @@
identifiers: identifiers:
pk: {{ $group.bindID | quote }} pk: {{ $group.bindID | quote }}
attrs: attrs:
pk: {{ $group.bindID | quote }}
group: !KeyOf {{ $group.slug | quote}} group: !KeyOf {{ $group.slug | quote}}
order: 10 order: 10
target: !Find [authentik_core.Application, [slug, {{ $.Values.blueprint.application.slug }}]] target: !Find [authentik_core.Application, [slug, {{ $.Values.blueprint.application.slug }}]]

16
authentik-application/files/provider/oidc.yaml.gotmpl
View file

@ -1,6 +1,20 @@
{{- $clientID := get . "clientID" }} {{- $clientID := get . "clientID" }}
{{- $clientSecret := get . "clientSecret" }} {{- $clientSecret := get . "clientSecret" }}
{{- with get . "root" }} {{- with get . "root" }}
{{- range .Values.blueprint.provider.oidc.scopes }}
{{- if .expression }}
- model: authentik_providers_oauth2.ScopeMapping
identifiers:
name: {{ .name | quote }}
state: present
attrs:
name: {{ .name | quote }}
scope_name: {{ .scope_name }}
expression: {{ .expression | quote }}
{{- end }}
{{- end }}
- model: authentik_providers_oauth2.OAuth2Provider - model: authentik_providers_oauth2.OAuth2Provider
id: {{ .Values.blueprint.provider.name | default (include "authentik-application.fullname" .) }} id: {{ .Values.blueprint.provider.name | default (include "authentik-application.fullname" .) }}
identifiers: identifiers:
@ -22,7 +36,7 @@
{{- with .scopes }} {{- with .scopes }}
property_mappings: property_mappings:
{{- range . }} {{- range . }}
- !Find [authentik_providers_oauth2.ScopeMapping, [scope_name, {{ . }}]] - !Find [authentik_providers_oauth2.ScopeMapping, [name, {{ .name | quote }}]]
{{- end }} {{- end }}
{{- end }} {{- end }}
{{- end }} {{- end }}

3
authentik-application/values.yaml
View file

@ -29,6 +29,9 @@ blueprint:
signingKey: "" signingKey: ""
# -- Scope # -- Scope
scopes: scopes:
# - name:
# scope_name:
# expression:
saml: saml:
proxy: proxy:
externalHost: externalHost:

4
forgejo-runner/README.adoc
View file

@ -2,7 +2,7 @@
= forgejo-runner = forgejo-runner
image::https://img.shields.io/badge/Version-0.1.2-informational?style=flat-square[Version: 0.1.2] image::https://img.shields.io/badge/Version-0.1.4-informational?style=flat-square[Version: 0.1.4]
image::https://img.shields.io/badge/Version-application-informational?style=flat-square[Type: application] image::https://img.shields.io/badge/Version-application-informational?style=flat-square[Type: application]
image::https://img.shields.io/badge/AppVersion-3.2.0-informational?style=flat-square[AppVersion: 3.2.0] image::https://img.shields.io/badge/AppVersion-3.2.0-informational?style=flat-square[AppVersion: 3.2.0]
@ -129,7 +129,7 @@ helm uninstall forgejo-runner-release
| kubectl.image.tag | kubectl.image.tag
| string | string
| `"1.27.7"` | `"1.28.5"`
| |
| nameOverride | nameOverride

2
publish.sh
View file

@ -13,11 +13,11 @@ for p in * ; do
if \ if \
[ $p == "alertmanager-matrix" ] || \ [ $p == "alertmanager-matrix" ] || \
[ $p == "alertmanager-ntfy" ] || \ [ $p == "alertmanager-ntfy" ] || \
[ $p == "authentik-application" ] || \
[ $p == "conduit" ] || \ [ $p == "conduit" ] || \
[ $p == "grampsweb" ] || \ [ $p == "grampsweb" ] || \
[ $p == "headscale" ] || \ [ $p == "headscale" ] || \
[ $p == "headscale-ui" ] || \ [ $p == "headscale-ui" ] || \
[ $p == "forgejo-runner" ] || \
[ $p == "jellyfin" ] || \ [ $p == "jellyfin" ] || \
[ $p == "miniserve" ] || \ [ $p == "miniserve" ] || \
[ $p == "monitoring" ] || \ [ $p == "monitoring" ] || \