commit 1ff37fbae7771d8cb4f42f639019e592b33779f0
author Giorgi Lekveishvili <lekva@gl-mbp-m1-max.local> Tue Jun 13 18:27:24 2023 +0400
committer Giorgi Lekveishvili <lekva@gl-mbp-m1-max.local> Tue Jun 13 18:27:24 2023 +0400
tree 9d2b3e6f0574fca72a855f3e3f42a728d5697af8
parent 8be0b942e6bfbae45d7afe2a7de9ffd68508ce9a

charts: pihole oauth2 secret renderer

charts/pihole/templates/oauth2-proxy-config.yaml

diff --git a/charts/pihole/templates/oauth2-proxy-config.yaml b/charts/pihole/templates/oauth2-proxy-config.yaml
index 04c6400..6afa5fd 100644
--- a/charts/pihole/templates/oauth2-proxy-config.yaml
+++ b/charts/pihole/templates/oauth2-proxy-config.yaml
@@ -1,50 +1,58 @@
-apiVersion: v1
-kind: ConfigMap
+apiVersion: dodo.cloud.dodo.cloud/v1
+kind: ResourceRenderer
 metadata:
-  name: {{ .Values.oauth2.configName }}
-  namespace: {{ .Release.Namespace }}
-data:
-  oauth2-proxy.cfg: |
-    http_address = "0.0.0.0:8080"
+  name: resourcerenderer-sample
+  namespace: test
+spec:
+  secretName: {{ .Values.oauth2.secretName }}
+  resourceTemplate: |
+    apiVersion: v1
+    kind: ConfigMap
+    metadata:
+      name: {{ .Values.oauth2.configName }}
+      namespace: {{ .Release.Namespace }}
+    data:
+      oauth2-proxy.cfg: |
+        http_address = "0.0.0.0:8080"
 
-    reverse_proxy = true
+        reverse_proxy = true
 
-    ## the OAuth Redirect URL.
-    # defaults to the "https://" + requested host header + "/oauth2/callback"
-    # redirect_url = "http://pihole.pcloud/oauth2/callback"
+        ## the OAuth Redirect URL.
+        # defaults to the "https://" + requested host header + "/oauth2/callback"
+        # redirect_url = "http://pihole.pcloud/oauth2/callback"
 
-    upstreams = [
-        "http://pihole-web.{{ .Release.Namespace}}.svc"
-    ]
+        upstreams = [
+            "http://pihole-web.{{ .Release.Namespace}}.svc"
+        ]
 
-    email_domains = [
-        "*"
-    ]
+        email_domains = [
+            "*"
+        ]
 
-    standard_logging = false
-    request_logging = false
-    auth_logging = false
+        standard_logging = false
+        request_logging = false
+        auth_logging = false
 
-    pass_basic_auth = true
-    pass_user_headers = true
-    pass_host_header = true
+        pass_basic_auth = true
+        pass_user_headers = true
+        pass_host_header = true
 
-    ## The OAuth Client ID, Secret
-    client_id = "{{ .Values.oauth2.clientId }}"
-    client_secret = "{{ .Values.oauth2.clientSecret }}"
+        ## The OAuth Client ID, Secret
+        client_id = "{{ .Values.oauth2.clientId }}"
+        client_secret = "{{ .Values.oauth2.clientSecret }}"
 
-    ## Pass OAuth Access token to upstream via "X-Forwarded-Access-Token"
-    pass_access_token = false
+        ## Pass OAuth Access token to upstream via "X-Forwarded-Access-Token"
+        pass_access_token = false
 
-    cookie_name = "_oauth2_proxy_pihole"
-    cookie_secret = "{{ .Values.oauth2.cookieSecret }}"
-    cookie_domains = "{{ .Values.domain }}"
-    cookie_expire = "168h"
-    cookie_refresh = "100h"
-    cookie_secure = true
-    cookie_httponly = true
+        cookie_name = "_oauth2_proxy_pihole"
+        cookie_secret = "{{ .Values.oauth2.cookieSecret }}"
+        cookie_domains = "{{ .Values.domain }}"
+        cookie_expire = "168h"
+        cookie_refresh = "100h"
+        cookie_secure = true
+        cookie_httponly = true
 
-    provider = "oidc"
-    oidc_issuer_url = "{{ .Values.hydraPublic }}"
-    provider_display_name = "PCloud"
-    profile_url = "{{ .Values.profileUrl }}"
+        provider = "oidc"
+        oidc_issuer_url = "{{ .Values.hydraPublic }}"
+        provider_display_name = "PCloud"
+        profile_url = "{{ .Values.profileUrl }}"

charts/pihole/values.yaml

diff --git a/charts/pihole/values.yaml b/charts/pihole/values.yaml
index 65d1de4..bea1a7e 100644
--- a/charts/pihole/values.yaml
+++ b/charts/pihole/values.yaml
@@ -1,7 +1,7 @@
 pihole: {}
 oauth2:
-  clientId: app-pihole
-  clientSecret: ""
+  clientId: {{ .client_id }}
+  clientSecret: {{ .client_secret }}
   cookieSecret: ""
   secretName: oauth2-secret
   configName: oauth2-proxy