coulomb/net-kingdom
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Deploy tenant authority for user portal
All checks were successful
CI Smoke / host-smoke (push) Successful in 1s
Details
CI Smoke / container-smoke (push) Successful in 2s
Details

Browse source
This commit is contained in:
tegwick 2026-08-09 01:39:57 +02:00
parent c4de9bab0a
commit 62b1ea3d59
2 changed files with 111 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

10
sso-mfa/k8s/user-engine/runtime.yaml
View file

@ -45,7 +45,7 @@ spec:
seccompProfile: {type: RuntimeDefault}
containers:
- name: portal
image: forgejo.coulomb.social/coulomb/user-engine@sha256:cef2fdb19fd001a9d2a64742f58dacdcf2ff5868ce50685c91eaad7880645fd0
image: forgejo.coulomb.social/coulomb/user-engine@sha256:ffca598fab9c035b58a40ae6c2be365497743a7594bc584124ab231383f25d8a
imagePullPolicy: IfNotPresent
ports: [{name: http, containerPort: 8080}]
env:
@ -63,6 +63,8 @@ spec:
- {name: USER_ENGINE_OIDC_BACKEND_URL, value: "http://keycape.sso.svc.cluster.local:8080"}
- {name: USER_ENGINE_PUBLIC_REGISTRATION, value: "false"}
- {name: USER_ENGINE_PROVISIONING_URL, value: "http://identity-provisioner.sso.svc.cluster.local:8080"}
- {name: USER_ENGINE_TENANT_MANAGEMENT_URL, value: "http://tenant-engine.tenant-engine.svc.cluster.local:8090"}
- {name: USER_ENGINE_TENANT_MANAGEMENT_TOKEN, value: "internal-service-boundary"}
- name: USER_ENGINE_PROVISIONING_TOKEN
valueFrom:
secretKeyRef: {name: identity-provisioner-client, key: token}
@ -127,6 +129,12 @@ spec:
podSelector:
matchLabels: {app.kubernetes.io/name: identity-provisioner}
ports: [{protocol: TCP, port: 8080}]
- to:
- namespaceSelector:
matchLabels: {kubernetes.io/metadata.name: tenant-engine}
podSelector:
matchLabels: {app.kubernetes.io/name: tenant-engine}
ports: [{protocol: TCP, port: 8090}]
- to:
- namespaceSelector:
matchLabels: {kubernetes.io/metadata.name: kube-system}