scottk/homelab
1
0
Fork 0
mirror of https://github.com/optim-enterprises-bv/homelab.git synced 2025-10-30 17:37:59 +00:00
Code Issues Packages Projects Releases Wiki Activity

feat(authelia): use ldaps with lldap

Browse Source 
this is kind of a pointless change, but kinda cool to try
This commit is contained in:
Vegard Hagen
2025-01-19 13:37:10 +01:00
parent 035d42adb8
commit a7ea9468e8
4 changed files with 17 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
k8s/infra/auth/authelia/kustomization.yaml
View File

@@ -21,3 +21,6 @@ helmCharts:
namespace: authelia namespace: authelia
version: 0.9.14 version: 0.9.14
valuesFile: values.yaml valuesFile: values.yaml
patches:
- path: patches/deployment-host-aliases.yaml

11
k8s/infra/auth/authelia/patches/deployment-host-aliases.yaml Normal file
View File

@@ -0,0 +1,11 @@
apiVersion: apps/v1
kind: Deployment
metadata:
name: authelia
spec:
template:
spec:
hostAliases:
- ip: 10.96.0.15
hostnames:
- lldap.stonegarden.dev

2
k8s/infra/auth/authelia/values.yaml
View File

@@ -50,7 +50,7 @@ configMap:
ldap: ldap:
enabled: true enabled: true
implementation: lldap implementation: lldap
address: ldap://lldap.lldap.svc.cluster.local address: ldaps://lldap.stonegarden.dev
base_dn: dc=stonegarden,dc=dev base_dn: dc=stonegarden,dc=dev
users_filter: (&(|({username_attribute}={input})({mail_attribute}={input}))(objectClass=person)) users_filter: (&(|({username_attribute}={input})({mail_attribute}={input}))(objectClass=person))
additional_users_dn: ou=people additional_users_dn: ou=people

2
k8s/infra/auth/lldap/svc.yaml
View File

@@ -7,6 +7,8 @@ metadata:
io.cilium/lb-ipam-ips: 192.168.1.242 io.cilium/lb-ipam-ips: 192.168.1.242
spec: spec:
type: LoadBalancer type: LoadBalancer
# https://kubernetes.io/docs/concepts/services-networking/cluster-ip-allocation/
clusterIP: 10.96.0.15
selector: selector:
app: lldap app: lldap
ports: ports: