mirror of
https://github.com/kubeshark/kubeshark.git
synced 2025-08-01 16:57:28 +00:00
f85c7dfb4b
* 🔧 Create dex config-map * 🔧 Create dex deployment * 🔧 Create dex service * 🔧 Create dex network policy * 🔧 Create dex network policy * 🔧 Add dex node selector terms * 🔧 Add a kubeshark-hub static client to dex config * 🐛 Use correct redirect URI for `kubeshark-hub` client * 🎨 Remove unused/commented dex config options * 🔨 Create a helper template to pick Kubeshark client secret * 🔧 Adjust front deployment env to allow `dex` auth type * 🔧 Adjust configmap to allow `dex` auth type * 🔧 Create k8s secret to store dex yaml config * 🔧 Mount dex-yaml-conf secret into `dex-config.yaml` * 🔥 Remove sample env var * 🔧 Create k8s config keys for Dex expiry settings * 🔧 Create k8s secret key for Dex client secret * 🔧 Deploy Dex resources if Dex auth is enabled * 🔧 Move `oauth2StateParamExpiry` under `customSettings` * 📝 Add basic helm-values docs to set up Dex auth * ✨ Separate Dex OIDC app settings from configuration * 📝 Update Dex documentation * 📝 Update Dex IdP documentation * 🦺 Add fallback value for OIDC issuer config * 🦺 Add fallback values for OIDC client ID/secret * 📝 Update Dex IdP documentation * 📝 Update Dex IdP documentation * 📝 Add reference to OIDC docs at `docs.kubeshark.co` --------- Co-authored-by: Alon Girmonsky <1990761+alongir@users.noreply.github.com>
101 lines
2.6 KiB
Smarty
101 lines
2.6 KiB
Smarty
{{/*
|
|
Expand the name of the chart.
|
|
*/}}
|
|
{{- define "kubeshark.name" -}}
|
|
{{- .Release.Name | trunc 63 | trimSuffix "-" }}
|
|
{{- end }}
|
|
|
|
{{/*
|
|
Create a default fully qualified app name.
|
|
We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec).
|
|
If release name contains chart name it will be used as a full name.
|
|
*/}}
|
|
{{- define "kubeshark.fullname" -}}
|
|
{{- printf "%s-%s" .Release.Name .Chart.Name | trunc 63 | trimSuffix "-" }}
|
|
{{- end }}
|
|
|
|
{{/*
|
|
Create chart name and version as used by the chart label.
|
|
*/}}
|
|
{{- define "kubeshark.chart" -}}
|
|
{{- printf "%s-%s" .Chart.Name .Chart.Version | replace "+" "_" | trunc 63 | trimSuffix "-" }}
|
|
{{- end }}
|
|
|
|
{{/*
|
|
Common labels
|
|
*/}}
|
|
{{- define "kubeshark.labels" -}}
|
|
helm.sh/chart: {{ include "kubeshark.chart" . }}
|
|
{{ include "kubeshark.selectorLabels" . }}
|
|
app.kubernetes.io/version: {{ .Chart.Version | quote }}
|
|
app.kubernetes.io/managed-by: {{ .Release.Service }}
|
|
{{- if .Values.tap.labels }}
|
|
{{ toYaml .Values.tap.labels }}
|
|
{{- end }}
|
|
{{- end }}
|
|
|
|
{{/*
|
|
Selector labels
|
|
*/}}
|
|
{{- define "kubeshark.selectorLabels" -}}
|
|
app.kubernetes.io/name: {{ include "kubeshark.name" . }}
|
|
app.kubernetes.io/instance: {{ .Release.Name }}
|
|
{{- end }}
|
|
|
|
{{/*
|
|
Create the name of the service account to use
|
|
*/}}
|
|
{{- define "kubeshark.serviceAccountName" -}}
|
|
{{- printf "%s-service-account" .Release.Name }}
|
|
{{- end }}
|
|
|
|
{{/*
|
|
Escape double quotes in a string
|
|
*/}}
|
|
{{- define "kubeshark.escapeDoubleQuotes" -}}
|
|
{{- regexReplaceAll "\"" . "\"" -}}
|
|
{{- end -}}
|
|
|
|
{{/*
|
|
Define debug docker tag suffix
|
|
*/}}
|
|
{{- define "kubeshark.dockerTagDebugVersion" -}}
|
|
{{- .Values.tap.pprof.enabled | ternary "-debug" "" }}
|
|
{{- end -}}
|
|
|
|
{{/*
|
|
Create docker tag default version
|
|
*/}}
|
|
{{- define "kubeshark.defaultVersion" -}}
|
|
{{- $defaultVersion := (printf "v%s" .Chart.Version) -}}
|
|
{{- if not .Values.tap.docker.tagLocked }}
|
|
{{- $defaultVersion = regexReplaceAll "^([^.]+\\.[^.]+).*" $defaultVersion "$1" -}}
|
|
{{- end }}
|
|
{{- $defaultVersion }}
|
|
{{- end -}}
|
|
|
|
{{/*
|
|
Set sentry based on internet connectivity and telemetry
|
|
*/}}
|
|
{{- define "sentry.enabled" -}}
|
|
{{- $sentryEnabledVal := .Values.tap.sentry.enabled -}}
|
|
{{- if not .Values.internetConnectivity -}}
|
|
{{- $sentryEnabledVal = false -}}
|
|
{{- else if not .Values.tap.telemetry.enabled -}}
|
|
{{- $sentryEnabledVal = false -}}
|
|
{{- end -}}
|
|
{{- $sentryEnabledVal -}}
|
|
{{- end -}}
|
|
|
|
{{/*
|
|
Dex IdP: retrieve a secret for static client with a specific ID
|
|
*/}}
|
|
{{- define "getDexKubesharkStaticClientSecret" -}}
|
|
{{- $clientId := .clientId -}}
|
|
{{- range .clients }}
|
|
{{- if eq .id $clientId }}
|
|
{{- .secret }}
|
|
{{- end }}
|
|
{{- end }}
|
|
{{- end }}
|