Mariusz Sabath
2c5dfa010f
* Improve Tornjak NOTES. Fixes #132 Signed-off-by: Mariusz Sabath <[email protected]> * Fix Tornjak ingress value Signed-off-by: Mariusz Sabath <[email protected]> --------- Signed-off-by: Mariusz Sabath <[email protected]>
50 lines
1.8 KiB
Plaintext
50 lines
1.8 KiB
Plaintext
Installed {{ .Chart.Name }}…
|
|
|
|
Get the currently registered SPIFFE entries from the server:
|
|
|
|
kubectl exec -n {{ include "spire-server.namespace" . }} {{ include "spire-server.fullname" . }}-0 -c spire-server -- \
|
|
spire-server entry show
|
|
|
|
{{- if eq (.Values.tornjak.enabled | toString) "true" }}
|
|
|
|
Installed {{ include "spire-tornjak.fullname" . }}…
|
|
|
|
{{- if eq .Values.tornjak.config.userManagement.issuer "" }}
|
|
|
|
### WARNING ###
|
|
|
|
Tornjak is configured to run without authentication and is therefore NOT suitable to run in production environments.
|
|
Only use in test environments!
|
|
{{- end }}
|
|
|
|
Access Tornjak API (Backend):
|
|
|
|
{{- if .Values.tornjak.ingress.enabled }}
|
|
|
|
Connect to: {{ printf "https://tornjak-backend.%s" (include "spire-lib.trust-domain" .) }}
|
|
|
|
{{- else }}
|
|
kubectl -n {{ include "spire-server.namespace" . }} port-forward service/{{ include "spire-tornjak.servicename" . }} {{ .Values.tornjak.service.ports.http }}:10000
|
|
{{- if eq (include "spire-tornjak.connectionType" .) "http" }}
|
|
|
|
Connect to: http://localhost:{{ .Values.tornjak.service.ports.http }}
|
|
{{- else if eq (include "spire-tornjak.connectionType" .) "tls" }}
|
|
|
|
Connect to: https://localhost:{{ .Values.tornjak.service.ports.https }}
|
|
|
|
*** NOTE: You might get a security warning if using self-signed certificate
|
|
or use curl:
|
|
|
|
curl --cacert certs/ca.crt https://localhost:{{ .Values.tornjak.service.ports.https }}
|
|
{{- if eq (include "spire-tornjak.connectionType" .) "mtls" }}
|
|
|
|
Or provide a client certificate and key to use mTLS authentication:
|
|
|
|
curl --cacert certs/ca.crt --key client.key --cert client.crt https://localhost:{{ .Values.tornjak.service.ports.https }}
|
|
{{- end }}
|
|
{{- else }}
|
|
ERROR! Incorrect value selected for "Values.tornjak.config.connectionType"
|
|
{{- end }}
|
|
{{- end }}
|
|
{{- end }}
|