From ecf0dce86fe202144d4bc187089ac533061a64bf Mon Sep 17 00:00:00 2001 From: genofire Date: Wed, 5 Apr 2023 23:52:37 +0000 Subject: [PATCH] feat(charts/authentik): add blueprints-sidecar to collect from cluster --- charts/authentik/templates/deployment.yaml | 28 ++++++++++++++++++++++ charts/authentik/values.yaml | 8 +++++++ 2 files changed, 36 insertions(+) diff --git a/charts/authentik/templates/deployment.yaml b/charts/authentik/templates/deployment.yaml index 5a7adb95..71502080 100644 --- a/charts/authentik/templates/deployment.yaml +++ b/charts/authentik/templates/deployment.yaml @@ -94,6 +94,10 @@ spec: - name: geoip-db mountPath: /geoip {{- end }} + {{- if $.Values.sidecar.blueprints.enabled }} + - name: sidecar-blueprints + mountPath: /blueprints/sidecar + {{- end }} {{- with $.Values.volumeMounts }} {{- toYaml . | nindent 12 }} {{- end }} @@ -151,6 +155,26 @@ spec: - name: geoip-db mountPath: /usr/share/GeoIP {{- end }} + {{- with $.Values.sidecar.blueprints }} + {{- if .enabled }} + - name: sidecar-blueprints + image: "{{ .image.repository }}:{{ .image.tag }}" + env: + - name: "FOLDER" + value: "/blueprints/sidecar" + - name: "LABEL" + value: "goauthentik_blueprint" + - name: "LABEL_VALUE" + value: "1" + {{- with .namespace }} + - name: "NAMESPACE" + value: "{{ . }}" + {{- end }} + volumeMounts: + - name: sidecar-blueprints + mountPath: /blueprints/sidecar + {{- end }} + {{- end }} {{- with $.Values.additionalContainers }} {{- $additionalContainers := list }} {{- range $name, $container := . }} @@ -166,6 +190,10 @@ spec: - name: geoip-db emptyDir: {} {{- end }} + {{- if $.Values.sidecar.blueprints.enabled }} + - name: sidecar-blueprints + emptyDir: {} + {{- end }} {{- with $.Values.volumes }} {{- toYaml . | nindent 8 }} {{- end }} diff --git a/charts/authentik/values.yaml b/charts/authentik/values.yaml index 28ee1341..4abea439 100644 --- a/charts/authentik/values.yaml +++ b/charts/authentik/values.yaml @@ -182,6 +182,14 @@ prometheus: # -- labels additional on PrometheusRule labels: {} +sidecar: + blueprints: + enabled: false + image: + repository: "ghcr.io/kiwigrid/k8s-sidecar" + tag: "1.23.0" + namespace: "" + geoip: # -- optional GeoIP, deploys a cronjob to download the maxmind database enabled: false