Commit 2c9dd035 authored by Kevin Di Lallo's avatar Kevin Di Lallo
Browse files

new auth service + migrated auth functionality from platform-ctrl to auth-svc

parent 6f505f06

.meepctl-repocfg.yaml

+28 −4
Original line number Diff line number Diff line
@@ -61,7 +61,7 @@ repo: 
        # access token url

        token-url: https://github.com/login/oauth/access_token

        # OAuth redirect URI

        redirect-uri: https://my-platform-fqdn/platform-ctrl/v1/authorize

        redirect-uri: https://my-platform-fqdn/auth/v1/authorize

        # OAuth k8s secret (data: client-id, secret)

        secret: meep-oauth-github

      # GitLab OAuth provider config
@@ -73,7 +73,7 @@ repo: 
        # access token url

        token-url: https://gitlab.com/oauth/token

        # OAuth redirect URI

        redirect-uri: https://my-platform-fqdn/platform-ctrl/v1/authorize

        redirect-uri: https://my-platform-fqdn/auth/v1/authorize

        # GitLab api url

        # api-url: https://gitlab.com

        # OAuth k8s secret (data: client-id, secret)
@@ -86,6 +86,31 @@ repo: 


    # Go Applications

    go-apps:

      meep-auth-svc:

        # location of source code

        src: go-apps/meep-auth-svc

        # location of binary

        bin: bin/meep-auth-svc

        # location of deployment chart

        chart: charts/meep-auth-svc

        # user supplied value file located @ .meep/user/values (use below file name)

        chart-user-values: meep-auth-svc.yaml

        # enable meepctl build

        build: true

        # enable meepctl dockerize

        dockerize: true

        # enable meepctl deploy/delete

        deploy: true

        # supports code coverage measurement when built in codecov mode

        codecov: true

        # supports linting

        lint: true

        # location of API specification

        api: go-apps/meep-auth-svc/api/swagger.yaml

        # AdvantEDGE resources included in Docker container image

        docker-data:

          # location of REST API permissions file

          'permissions.yaml': config/permissions.yaml

      meep-ingress-certs:

        # enable meepctl build

        build: false
@@ -178,8 +203,6 @@ repo: 
          swagger: bin/meep-platform-swagger-ui

          # location of AdvantEDGE frontend

          frontend: bin/meep-frontend

          # location of REST API permissions file

          'permissions.yaml': config/permissions.yaml

      meep-virt-engine:

        # location of source code

        src: go-apps/meep-virt-engine
@@ -284,6 +307,7 @@ repo: 
        lint: false

        # list of platform level swagger specs

        api-bundle:

          - core.go-apps.meep-auth-svc

          - core.go-apps.meep-platform-ctrl

          - core.go-apps.meep-mon-engine

      meep-sandbox-swagger-ui:

charts/grafana/values.yaml

+13 −1
Original line number Diff line number Diff line
@@ -123,6 +123,7 @@ ingress: 
  enabled: true

  annotations:

    nginx.ingress.kubernetes.io/rewrite-target: /$2

    nginx.ingress.kubernetes.io/auth-url: https://10.190.114.150/auth/v1/authenticate?svc=grafana&sbox=

    kubernetes.io/ingress.class: nginx

    # kubernetes.io/tls-acme: "true"

  labels: {}
@@ -413,9 +414,20 @@ dashboardsConfigMaps: {} 
## ref: http://docs.grafana.org/installation/configuration/

##

grafana.ini:

  'auth.basic':

    enabled: false

  'auth.anonymous':

    enabled: true

    org_role: Admin

    org_role: Viewer

  # 'auth.github':

  #   enabled: false

  #   allow_sign_up: true

  #   client_id: 8a10c1c7486e56592aa4

  #   client_secret: 6fe09e84c23b1e75f4caf963698a190921938897

  #   scopes: user:email,read:org

  #   auth_url: https://github.com/login/oauth/authorize

  #   token_url: https://github.com/login/oauth/access_token

  #   api_url: https://api.github.com/user

  security:

    allow_embedding: true

  paths:

charts/meep-auth-svc/.helmignore

0 → 100644
+21 −0
Original line number Diff line number Diff line 
# Patterns to ignore when building packages.

# This supports shell glob matching, relative path matching, and

# negation (prefixed with !). Only one pattern per line.

.DS_Store

# Common VCS dirs

.git/

.gitignore

.bzr/

.bzrignore

.hg/

.hgignore

.svn/

# Common backup files

*.swp

*.bak

*.tmp

*~

# Various IDEs

.project

.idea/

*.tmproj

charts/meep-auth-svc/Chart.yaml

0 → 100644
+5 −0
Original line number Diff line number Diff line 
apiVersion: v2

appVersion: "1.0.0"

description: Meep Auth Service Helm chart for Kubernetes

name: meep-auth-svc

version: 1.0.0

charts/meep-auth-svc/templates/_helpers.tpl

0 → 100644
+32 −0
Original line number Diff line number Diff line 
{{/* vim: set filetype=mustache: */}}

{{/*

Expand the name of the chart.

*/}}

{{- define "meep-auth-svc.name" -}}

{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" -}}

{{- end -}}



{{/*

Create a default fully qualified app name.

We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec).

If release name contains chart name it will be used as a full name.

*/}}

{{- define "meep-auth-svc.fullname" -}}

{{- if .Values.fullnameOverride -}}

{{- .Values.fullnameOverride | trunc 63 | trimSuffix "-" -}}

{{- else -}}

{{- $name := default .Chart.Name .Values.nameOverride -}}

{{- if contains $name .Release.Name -}}

{{- .Release.Name | trunc 63 | trimSuffix "-" -}}

{{- else -}}

{{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" -}}

{{- end -}}

{{- end -}}

{{- end -}}



{{/*

Create chart name and version as used by the chart label.

*/}}

{{- define "meep-auth-svc.chart" -}}

{{- printf "%s-%s" .Chart.Name .Chart.Version | replace "+" "_" | trunc 63 | trimSuffix "-" -}}

{{- end -}}