Add auth option for Tornjak (#259)

* Added auth option, specifically keycloak for tornjak production use Signed-off-by: Mohammed Abdi <[email protected]> * Added auth values for tornjak Signed-off-by: Mohammed Abdi <[email protected]> * Update charts/spire/charts/tornjak-frontend/values.yaml Co-authored-by: Faisal Memon <[email protected]> Signed-off-by: Mohammed Abdi <[email protected]> * Update examples/tornjak/keycloak/README.md Co-authored-by: Faisal Memon <[email protected]> Signed-off-by: Mohammed Abdi <[email protected]> * Update examples/tornjak/keycloak/README.md Co-authored-by: Faisal Memon <[email protected]> Signed-off-by: Mohammed Abdi <[email protected]> * Update examples/tornjak/keycloak/README.md Co-authored-by: Faisal Memon <[email protected]> Signed-off-by: Mohammed Abdi <[email protected]> * Update examples/tornjak/keycloak/README.md Co-authored-by: Faisal Memon <[email protected]> Signed-off-by: Mohammed Abdi <[email protected]> * Update examples/tornjak/keycloak/README.md Co-authored-by: Faisal Memon <[email protected]> Signed-off-by: Mohammed Abdi <[email protected]> * Update examples/tornjak/keycloak/README.md Co-authored-by: Faisal Memon <[email protected]> Signed-off-by: Mohammed Abdi <[email protected]> * nit Signed-off-by: Mohammed Abdi <[email protected]> * nit Signed-off-by: Mohammed Abdi <[email protected]> * nit Signed-off-by: Mohammed Abdi <[email protected]> * Update examples/tornjak/keycloak/README.md Co-authored-by: Mariusz Sabath <[email protected]> Signed-off-by: Mohammed Abdi <[email protected]> * nit Signed-off-by: Mohammed Abdi <[email protected]> * install keycloak first Signed-off-by: Mohammed Abdi <[email protected]> * add logs volume back Signed-off-by: Mohammed Abdi <[email protected]> * Fixed NPM init error Signed-off-by: Mariusz Sabath <[email protected]> * Fixed the values documentation errors Signed-off-by: Mariusz Sabath <[email protected]> * Post-review suggestion fixes Signed-off-by: Mariusz Sabath <[email protected]> * Fixed typo Signed-off-by: Mariusz Sabath <[email protected]> * Updating Keyclaok examples README Signed-off-by: Mariusz Sabath <[email protected]> * Fixed the parameter reference Signed-off-by: Mariusz Sabath <[email protected]> * Fix typo Signed-off-by: Mariusz Sabath <[email protected]> * use keycloak-config-cli to simplify tornjak realm import Signed-off-by: MohammedAbdi <[email protected]> * edit client id Signed-off-by: MohammedAbdi <[email protected]> * reverse client id Signed-off-by: MohammedAbdi <[email protected]> * fix the doc Signed-off-by: Mariusz Sabath <[email protected]> * update tornjak version and backend auth Signed-off-by: MohammedAbdi <[email protected]> * update client id Signed-off-by: MohammedAbdi <[email protected]> * updates values yaml Signed-off-by: MohammedAbdi <[email protected]> * update documentation Signed-off-by: MohammedAbdi <[email protected]> * nit Signed-off-by: MohammedAbdi <[email protected]> * update doc Signed-off-by: MohammedAbdi <[email protected]> * add audience check tornjak Signed-off-by: MohammedAbdi <[email protected]> * remove unused file Signed-off-by: MohammedAbdi <[email protected]> * update doc Signed-off-by: MohammedAbdi <[email protected]> * nit and add auth not enabled warning back Signed-off-by: MohammedAbdi <[email protected]> * adjust liveness probe until tornjak handles liveendpoint for auth and direct connection to discovery Signed-off-by: MohammedAbdi <[email protected]> * update doc and add keycloak proxy Signed-off-by: MohammedAbdi <[email protected]> --------- Signed-off-by: Mohammed Abdi <[email protected]> Signed-off-by: Mohammed Abdi <[email protected]> Signed-off-by: Mariusz Sabath <[email protected]> Signed-off-by: MohammedAbdi <[email protected]> Co-authored-by: Mohammed Abdi <[email protected]> Co-authored-by: Faisal Memon <[email protected]> Co-authored-by: Mariusz Sabath <[email protected]>
2024-04-25 15:49:20 -07:00
parent f679a0dab6
commit a2494ee45e
15 changed files with 360 additions and 71 deletions
@@ -10,11 +10,15 @@ Tornjak UI (Frontend)
  pull policy: {{ .Values.image.pullPolicy }}
  Tornjak API (Backend): {{ include "tornjak-frontend.apiURL" . }}
  SPIRE health check enabled:  "{{ .Values.spireHealthCheck.enabled }}"
+  User Managemenet enabled:  "{{ .Values.auth.enabled }}"
+  User Managemenet API:  "{{ .Values.auth.serverURL }}"

-### WARNING ###
+{{- if not .Values.auth.enabled }}
+  ### WARNING ###

-Tornjak runs without authentication and is therefore NOT suitable to run in production environments.
-Only use in test environments!
+  Tornjak is configured to run without authentication and is therefore NOT suitable to run in production environments.
+  Only use in test environments!
+{{- end }}

 Access Tornjak:

@@ -35,10 +35,14 @@ spec:
          env:
            - name: REACT_APP_API_SERVER_URI
              value: {{ include "tornjak-frontend.apiURL" . }}
-            {{- if eq (.Values.spireHealthCheck.enabled | toString) "true" }}
+            {{- if .Values.spireHealthCheck.enabled }}
            - name: REACT_APP_SPIRE_HEALTH_CHECK_ENABLE
              value: "{{ .Values.spireHealthCheck.enabled }}"
            {{- end }}
+            {{- if .Values.auth.enabled }}
+            - name: REACT_APP_AUTH_SERVER_URI
+              value:  "{{ .Values.auth.serverURL }}"
+            {{- end }}
          {{- if .Values.startupProbe.enabled }}
          startupProbe:
            httpGet:
@@ -57,7 +61,7 @@ spec:
            - name: env
              mountPath: {{ include "tornjak-frontend.workingDir" . }}/build/tmp
            - name: logs
-              mountPath: /opt/app-root/src/.npm/
+              mountPath: {{ .Values.logsDir }}
      {{- with .Values.nodeSelector }}
      nodeSelector:
        {{- toYaml . | nindent 8 }}