forked from ungleich-public/ungleich-user
Sajeyks
66d074c54a
deploy/k8s/dev runs the base with 2 replicas alongside throwaway services: two independent OpenLDAP servers (the dev image), PostgreSQL 18 and Mailpit. deploy/k8s/dev/e2e.sh checks a running deployment: both probes, registration with the activation mail sent over SMTP (and no password in it), activation, login, and login and readiness while ldap1 is scaled to zero. All checks pass.
95 lines
2.5 KiB
YAML
95 lines
2.5 KiB
YAML
# Local test overlay (kind): the app plus throwaway LDAP, PostgreSQL and a
|
|
# mail catcher (Mailpit).
|
|
# Dev-only credentials, no persistence. See deploy/k8s/README.md.
|
|
apiVersion: kustomize.config.k8s.io/v1beta1
|
|
kind: Kustomization
|
|
|
|
namespace: ungleich-user-dev
|
|
|
|
resources:
|
|
- namespace.yaml
|
|
- ../base
|
|
- ldap.yaml
|
|
- postgres.yaml
|
|
- mailpit.yaml
|
|
|
|
secretGenerator:
|
|
- name: ungleich-user
|
|
options:
|
|
disableNameSuffixHash: true
|
|
literals:
|
|
- SECRET_KEY=dev-only-not-a-secret-dev-only-not-a-secret-dev-only
|
|
- LDAP_ADMIN_DN=cn=admin,dc=ungleich,dc=ch
|
|
- LDAP_ADMIN_PASSWORD=admin
|
|
- DATABASE_PASSWORD=dev-only
|
|
- ADMIN_SEED=JBSWY3DPEHPK3PXP
|
|
|
|
patches:
|
|
- target: {kind: ConfigMap, name: ungleich-user}
|
|
patch: |-
|
|
- op: replace
|
|
path: /data/ALLOWED_HOSTS
|
|
value: "localhost,127.0.0.1"
|
|
- op: replace
|
|
path: /data/CSRF_TRUSTED_ORIGINS
|
|
value: "http://localhost:8080"
|
|
- op: replace
|
|
path: /data/LDAPSERVER
|
|
value: "ldap://ldap1:389 ldap://ldap2:389"
|
|
- op: replace
|
|
path: /data/LDAP_USE_TLS
|
|
value: "False"
|
|
- op: replace
|
|
path: /data/LDAP_CUSTOMER_GROUP_ID
|
|
value: "2000"
|
|
- op: replace
|
|
path: /data/LDAP_DEFAULT_START_UID
|
|
value: "10000"
|
|
- op: replace
|
|
path: /data/DATABASE_HOST
|
|
value: "postgres"
|
|
- op: replace
|
|
path: /data/EMAIL_FROM_ADDRESS
|
|
value: "noreply@example.com"
|
|
- op: replace
|
|
path: /data/OTPSERVER
|
|
value: "http://otp.invalid/"
|
|
- op: replace
|
|
path: /data/ADMIN_NAME
|
|
value: "dev"
|
|
- op: replace
|
|
path: /data/ADMIN_REALM
|
|
value: "ungleich-admin"
|
|
- op: replace
|
|
path: /data/USER_REALM
|
|
value: "ungleich-auth"
|
|
- op: replace
|
|
path: /data/ALLOWED_REALMS
|
|
value: "ungleich-auth"
|
|
- op: replace
|
|
path: /data/EMAIL_HOST
|
|
value: "mailpit"
|
|
- op: replace
|
|
path: /data/EMAIL_PORT
|
|
value: "1025"
|
|
- op: replace
|
|
path: /data/EMAIL_USE_TLS
|
|
value: "False"
|
|
- op: add
|
|
path: /data/SESSION_COOKIE_SECURE
|
|
value: "False"
|
|
- op: add
|
|
path: /data/CSRF_COOKIE_SECURE
|
|
value: "False"
|
|
- target: {kind: Ingress, name: ungleich-user}
|
|
patch: |-
|
|
$patch: delete
|
|
apiVersion: networking.k8s.io/v1
|
|
kind: Ingress
|
|
metadata:
|
|
name: ungleich-user
|
|
|
|
images:
|
|
- name: ungleich-user
|
|
newName: ungleich-user
|
|
newTag: dev
|