Marco Franssen
10f0138a25
Enable oidc service domains in oidc by default
...
Signed-off-by: Marco Franssen <[email protected] >
2023-02-18 13:04:05 +01:00
Marco Franssen
ec61c387b0
Fix oidc health check using using scratch images
...
Signed-off-by: Marco Franssen <[email protected] >
2023-02-18 13:04:04 +01:00
Marco Franssen and Gert Jan Kamstra
4f93ead90a
Configurable insecureScheme nginx image
...
Co-Authored-by: Gert Jan Kamstra <[email protected] >
Signed-off-by: Marco Franssen <[email protected] >
2023-02-18 13:04:02 +01:00
Marco Franssen
46466e5ec6
Run oidc insecure on unix socket using Nginx
...
Signed-off-by: Marco Franssen <[email protected] >
2023-02-18 13:04:01 +01:00
Marco Franssen
c9f69907ac
Use new domains configuration
...
Signed-off-by: Marco Franssen <[email protected] >
2023-02-18 13:04:01 +01:00
Marco Franssen
4d3fb47839
Change socket mounts for more control (readonly)
...
pods like oidc mount more then one of these sockets, now we can control readonly vs non readonly better
Signed-off-by: Marco Franssen <[email protected] >
Signed-off-by: Marco Franssen <[email protected] >
2023-02-18 13:04:01 +01:00
Marco Franssen
f2d7aa1f62
Run oidc discovery provider as separate pod using workload api
...
Signed-off-by: Marco Franssen <[email protected] >
2023-02-18 13:04:01 +01:00
Marco Franssen
31bce3b09e
Remove spire ingress as it complicate SNI acme
...
Signed-off-by: Marco Franssen <[email protected] >
2023-02-18 13:04:01 +01:00
Marco Franssen
007fa7b83d
Initial spire chart setup
...
Signed-off-by: Marco Franssen <[email protected] >
2023-02-18 13:04:00 +01:00