coulomb/net-kingdom
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Deploy KeyCape-backed portal login edge
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details

Browse source
This commit is contained in:
tegwick 2026-07-28 00:39:22 +02:00
parent eac9d655b0
commit 9a486c3531
5 changed files with 145 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

11
sso-mfa/k8s/user-engine/runtime.yaml
View file

@ -45,7 +45,7 @@ spec:
seccompProfile: {type: RuntimeDefault}
containers:
- name: portal
image: user-engine:portal-c27012a
image: user-engine:portal-268b315
imagePullPolicy: Never
ports: [{name: http, containerPort: 8080}]
env:
@ -58,6 +58,9 @@ spec:
- {name: USER_ENGINE_LOGIN_URL, value: "https://kc.coulomb.social/"}
- {name: USER_ENGINE_OIDC_ISSUER, value: "https://kc.coulomb.social"}
- {name: USER_ENGINE_OIDC_AUDIENCE, value: user-engine-portal}
- {name: USER_ENGINE_OIDC_CLIENT_ID, value: user-engine-portal}
- {name: USER_ENGINE_OIDC_REDIRECT_URI, value: "https://users.92-205-62-239.nip.io/oidc/callback"}
- {name: USER_ENGINE_OIDC_BACKEND_URL, value: "http://keycape.sso.svc.cluster.local:8080"}
- {name: USER_ENGINE_PUBLIC_REGISTRATION, value: "false"}
securityContext:
allowPrivilegeEscalation: false
@ -108,6 +111,12 @@ spec:
- podSelector:
matchLabels: {cnpg.io/cluster: user-engine-pg}
ports: [{protocol: TCP, port: 5432}]
- to:
- namespaceSelector:
matchLabels: {kubernetes.io/metadata.name: sso}
podSelector:
matchLabels: {app.kubernetes.io/name: keycape}
ports: [{protocol: TCP, port: 8080}]
- to:
- namespaceSelector:
matchLabels: {kubernetes.io/metadata.name: kube-system}