diff --git a/charts/mongo-ui/templates/deployment.yaml b/charts/mongo-ui/templates/deployment.yaml index c7108682..ca7a62f8 100644 --- a/charts/mongo-ui/templates/deployment.yaml +++ b/charts/mongo-ui/templates/deployment.yaml @@ -29,6 +29,46 @@ spec: securityContext: {{- toYaml .Values.podSecurityContext | nindent 8 }} containers: + {{- if .Values.authzproxy.enabled }} + - name: authz-proxy + securityContext: + {{- toYaml .Values.authzproxy.securityContext | nindent 12 }} + image: "{{ .Values.authzproxy.repository }}:{{ .Values.authzproxy.tag | default .Chart.AppVersion }}" + imagePullPolicy: {{ .Values.image.pullPolicy }} + args: + - run + - --listen={{ .Values.authzproxy.params.listen }} + - --metrics-addr={{ .Values.authzproxy.params.metricsAddr }} + - --secret-name={{ .Values.app.authSecret.name }} + - --secret-namespace={{ .Release.Namespace }} + - --target-url=http://localhost:4321 + - --platform-url={{ .Values.authzproxy.params.platformURL }} + {{- if .Values.authzproxy.params.platformCABundle }} + - --platform-ca-file=/var/platform-auth/ca.crt + {{- end }} + ports: + - name: proxy + containerPort: {{ .Values.authzproxy.params.listen }} + protocol: TCP + - name: metrics + containerPort: {{ .Values.authzproxy.params.metricsAddr }} + protocol: TCP + # livenessProbe: + # httpGet: + # path: / + # port: http + # readinessProbe: + # httpGet: + # path: / + # port: http + resources: + {{- toYaml .Values.authzproxy.resources | nindent 12 }} + {{- if .Values.authzproxy.params.platformCABundle }} + volumeMounts: + - mountPath: /var/platform-auth + name: platform-auth + {{- end }} + {{ end }} - name: {{ .Chart.Name }} securityContext: {{- toYaml .Values.securityContext | nindent 12 }} diff --git a/charts/pgadmin/templates/deployment.yaml b/charts/pgadmin/templates/deployment.yaml index 9778a78f..8e281ea4 100644 --- a/charts/pgadmin/templates/deployment.yaml +++ b/charts/pgadmin/templates/deployment.yaml @@ -41,7 +41,7 @@ spec: - --metrics-addr={{ .Values.authzproxy.params.metricsAddr }} - --secret-name={{ .Values.app.authSecret.name }} - --secret-namespace={{ .Release.Namespace }} - - --target-url=http://localhost:3000 + - --target-url=http://localhost:80 - --platform-url={{ .Values.authzproxy.params.platformURL }} {{- if .Values.authzproxy.params.platformCABundle }} - --platform-ca-file=/var/platform-auth/ca.crt diff --git a/charts/phpmyadmin/templates/deployment.yaml b/charts/phpmyadmin/templates/deployment.yaml index bb2d2a8e..40e88214 100644 --- a/charts/phpmyadmin/templates/deployment.yaml +++ b/charts/phpmyadmin/templates/deployment.yaml @@ -41,7 +41,7 @@ spec: - --metrics-addr={{ .Values.authzproxy.params.metricsAddr }} - --secret-name={{ .Values.app.authSecret.name }} - --secret-namespace={{ .Release.Namespace }} - - --target-url=http://localhost:3000 + - --target-url=http://localhost:80 - --platform-url={{ .Values.authzproxy.params.platformURL }} {{- if .Values.authzproxy.params.platformCABundle }} - --platform-ca-file=/var/platform-auth/ca.crt