auth-proxy: verify group membership (#105)
* auth-proxy: verify group membership
* memberships: install memberships app and use it in few apps
* app-repo: render auth
* installer: always use external dependencies option in app configs
* installer: fix auth handling
* auth-proxy: configure membership-addr and groups flags in helm chart
* installer: fix indentation
* app-manager: fix how auth block is rendered
---------
Co-authored-by: Giorgi Lekveishvili <lekva@gl-mbp-m1-max.local>
diff --git a/core/installer/values-tmpl/cert-manager.cue b/core/installer/values-tmpl/cert-manager.cue
index 7f4f55a..fdede37 100644
--- a/core/installer/values-tmpl/cert-manager.cue
+++ b/core/installer/values-tmpl/cert-manager.cue
@@ -55,7 +55,7 @@
helm: {
"cert-manager": {
chart: charts.certManager
- dependsOnExternal: [{
+ dependsOn: [{
name: "ingress-public"
namespace: _ingressPublic
}]
@@ -87,7 +87,10 @@
}
"cert-manager-webhook-pcloud": {
chart: charts.dnsChallengeSolver
- dependsOn: [helm["cert-manager"]]
+ dependsOn: [{
+ name: "cert-manager"
+ namespace: release.namespace
+ }]
values: {
fullnameOverride: "\(global.pcloudEnvName)-cert-manager-webhook-pcloud"
certManager: {