Fix target urls for authz proxy

Signed-off-by: Tamal Saha <[email protected]>
kubedb · Jul 18, 2024 · 8a97434 · 8a97434
1 parent 1dd6714
commit 8a97434
Show file tree

Hide file tree

Showing 3 changed files with 42 additions and 2 deletions.
diff --git a/charts/mongo-ui/templates/deployment.yaml b/charts/mongo-ui/templates/deployment.yaml
@@ -29,6 +29,46 @@ spec:
       securityContext:
         {{- toYaml .Values.podSecurityContext | nindent 8 }}
       containers:
+        {{- if .Values.authzproxy.enabled }}
+        - name: authz-proxy
+          securityContext:
+            {{- toYaml .Values.authzproxy.securityContext | nindent 12 }}
+          image: "{{ .Values.authzproxy.repository }}:{{ .Values.authzproxy.tag | default .Chart.AppVersion }}"
+          imagePullPolicy: {{ .Values.image.pullPolicy }}
+          args:
+            - run
+            - --listen={{ .Values.authzproxy.params.listen }}
+            - --metrics-addr={{ .Values.authzproxy.params.metricsAddr }}
+            - --secret-name={{ .Values.app.authSecret.name }}
+            - --secret-namespace={{ .Release.Namespace }}
+            - --target-url=http://localhost:4321
+            - --platform-url={{ .Values.authzproxy.params.platformURL }}
+            {{- if .Values.authzproxy.params.platformCABundle }}
+            - --platform-ca-file=/var/platform-auth/ca.crt
+            {{- end }}
+          ports:
+            - name: proxy
+              containerPort: {{ .Values.authzproxy.params.listen }}
+              protocol: TCP
+            - name: metrics
+              containerPort: {{ .Values.authzproxy.params.metricsAddr }}
+              protocol: TCP
+          # livenessProbe:
+          #   httpGet:
+          #     path: /
+          #     port: http
+          # readinessProbe:
+          #   httpGet:
+          #     path: /
+          #     port: http
+          resources:
+            {{- toYaml .Values.authzproxy.resources | nindent 12 }}
+          {{- if .Values.authzproxy.params.platformCABundle }}
+          volumeMounts:
+            - mountPath: /var/platform-auth
+              name: platform-auth
+          {{- end }}
+        {{ end }}
         - name: {{ .Chart.Name }}
           securityContext:
             {{- toYaml .Values.securityContext | nindent 12 }}

diff --git a/charts/pgadmin/templates/deployment.yaml b/charts/pgadmin/templates/deployment.yaml
@@ -41,7 +41,7 @@ spec:
             - --metrics-addr={{ .Values.authzproxy.params.metricsAddr }}
             - --secret-name={{ .Values.app.authSecret.name }}
             - --secret-namespace={{ .Release.Namespace }}
-            - --target-url=http://localhost:3000
+            - --target-url=http://localhost:80
             - --platform-url={{ .Values.authzproxy.params.platformURL }}
             {{- if .Values.authzproxy.params.platformCABundle }}
             - --platform-ca-file=/var/platform-auth/ca.crt

diff --git a/charts/phpmyadmin/templates/deployment.yaml b/charts/phpmyadmin/templates/deployment.yaml
@@ -41,7 +41,7 @@ spec:
             - --metrics-addr={{ .Values.authzproxy.params.metricsAddr }}
             - --secret-name={{ .Values.app.authSecret.name }}
             - --secret-namespace={{ .Release.Namespace }}
-            - --target-url=http://localhost:3000
+            - --target-url=http://localhost:80
             - --platform-url={{ .Values.authzproxy.params.platformURL }}
             {{- if .Values.authzproxy.params.platformCABundle }}
             - --platform-ca-file=/var/platform-auth/ca.crt