Unverified Commit 517e0b29 authored by Kevin Di Lallo's avatar Kevin Di Lallo Committed by GitHub
Browse files

Merge pull request #188 from dilallkx/kd_sp03_dev_auth 

Authorization & Authentication Service
parents 6f505f06 d2f266d1

.meepctl-repocfg.yaml

+34 −7
Original line number Diff line number Diff line
@@ -12,7 +12,7 @@ 
# See the License for the specific language governing permissions and

# limitations under the License.



version: 1.6.0

version: 1.6.2

repo:

  name: AdvantEDGE
@@ -47,6 +47,9 @@ repo: 


    # authentication & authorization config

    auth:

      # enable authentication & authorization

      enabled: true

      # Session config

      session:

        # session encryption key k8s secret (data: encryption-key)

        key-secret: meep-session
@@ -55,25 +58,25 @@ repo: 
      # GitHub OAuth provider config

      github:

        # enable GitHub OAuth

        enabled: true

        enabled: false

        # authorization url

        auth-url: https://github.com/login/oauth/authorize

        # access token url

        token-url: https://github.com/login/oauth/access_token

        # OAuth redirect URI

        redirect-uri: https://my-platform-fqdn/platform-ctrl/v1/authorize

        redirect-uri: https://my-platform-fqdn/auth/v1/authorize

        # OAuth k8s secret (data: client-id, secret)

        secret: meep-oauth-github

      # GitLab OAuth provider config

      gitlab:

        # enable GitLab OAuth

        enabled: true

        enabled: false

        # authorization url

        auth-url: https://gitlab.com/oauth/authorize

        # access token url

        token-url: https://gitlab.com/oauth/token

        # OAuth redirect URI

        redirect-uri: https://my-platform-fqdn/platform-ctrl/v1/authorize

        redirect-uri: https://my-platform-fqdn/auth/v1/authorize

        # GitLab api url

        # api-url: https://gitlab.com

        # OAuth k8s secret (data: client-id, secret)
@@ -86,6 +89,31 @@ repo: 


    # Go Applications

    go-apps:

      meep-auth-svc:

        # location of source code

        src: go-apps/meep-auth-svc

        # location of binary

        bin: bin/meep-auth-svc

        # location of deployment chart

        chart: charts/meep-auth-svc

        # user supplied value file located @ .meep/user/values (use below file name)

        chart-user-values: meep-auth-svc.yaml

        # enable meepctl build

        build: true

        # enable meepctl dockerize

        dockerize: true

        # enable meepctl deploy/delete

        deploy: true

        # supports code coverage measurement when built in codecov mode

        codecov: true

        # supports linting

        lint: true

        # location of API specification

        api: go-apps/meep-auth-svc/api/swagger.yaml

        # AdvantEDGE resources included in Docker container image

        docker-data:

          # location of REST API permissions file

          'permissions.yaml': config/permissions.yaml

      meep-ingress-certs:

        # enable meepctl build

        build: false
@@ -178,8 +206,6 @@ repo: 
          swagger: bin/meep-platform-swagger-ui

          # location of AdvantEDGE frontend

          frontend: bin/meep-frontend

          # location of REST API permissions file

          'permissions.yaml': config/permissions.yaml

      meep-virt-engine:

        # location of source code

        src: go-apps/meep-virt-engine
@@ -284,6 +310,7 @@ repo: 
        lint: false

        # list of platform level swagger specs

        api-bundle:

          - core.go-apps.meep-auth-svc

          - core.go-apps.meep-platform-ctrl

          - core.go-apps.meep-mon-engine

      meep-sandbox-swagger-ui:

charts/grafana/values.yaml

+13 −2
Original line number Diff line number Diff line
@@ -124,7 +124,7 @@ ingress: 
  annotations:

    nginx.ingress.kubernetes.io/rewrite-target: /$2

    kubernetes.io/ingress.class: nginx

    # kubernetes.io/tls-acme: "true"

    # nginx.ingress.kubernetes.io/auth-url: <-- set by 'meepctl deploy' when auth enabled

  labels: {}

  path: /grafana(/|$)(.*)

  hosts:
@@ -413,9 +413,20 @@ dashboardsConfigMaps: {} 
## ref: http://docs.grafana.org/installation/configuration/

##

grafana.ini:

  'auth.basic':

    enabled: false

  'auth.anonymous':

    enabled: true

    org_role: Admin

    org_role: Viewer

  # 'auth.github':

  #   enabled: false

  #   allow_sign_up: true

  #   client_id: 8a10c1c7486e56592aa4

  #   client_secret: 6fe09e84c23b1e75f4caf963698a190921938897

  #   scopes: user:email,read:org

  #   auth_url: https://github.com/login/oauth/authorize

  #   token_url: https://github.com/login/oauth/access_token

  #   api_url: https://api.github.com/user

  security:

    allow_embedding: true

  paths:

charts/meep-auth-svc/.helmignore

0 → 100644
+21 −0
Original line number Diff line number Diff line 
# Patterns to ignore when building packages.

# This supports shell glob matching, relative path matching, and

# negation (prefixed with !). Only one pattern per line.

.DS_Store

# Common VCS dirs

.git/

.gitignore

.bzr/

.bzrignore

.hg/

.hgignore

.svn/

# Common backup files

*.swp

*.bak

*.tmp

*~

# Various IDEs

.project

.idea/

*.tmproj

charts/meep-auth-svc/Chart.yaml

0 → 100644
+5 −0
Original line number Diff line number Diff line 
apiVersion: v2

appVersion: "1.0.0"

description: Meep Auth Service Helm chart for Kubernetes

name: meep-auth-svc

version: 1.0.0

charts/meep-auth-svc/templates/_helpers.tpl

0 → 100644
+32 −0
Original line number Diff line number Diff line 
{{/* vim: set filetype=mustache: */}}

{{/*

Expand the name of the chart.

*/}}

{{- define "meep-auth-svc.name" -}}

{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" -}}

{{- end -}}



{{/*

Create a default fully qualified app name.

We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec).

If release name contains chart name it will be used as a full name.

*/}}

{{- define "meep-auth-svc.fullname" -}}

{{- if .Values.fullnameOverride -}}

{{- .Values.fullnameOverride | trunc 63 | trimSuffix "-" -}}

{{- else -}}

{{- $name := default .Chart.Name .Values.nameOverride -}}

{{- if contains $name .Release.Name -}}

{{- .Release.Name | trunc 63 | trimSuffix "-" -}}

{{- else -}}

{{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" -}}

{{- end -}}

{{- end -}}

{{- end -}}



{{/*

Create chart name and version as used by the chart label.

*/}}

{{- define "meep-auth-svc.chart" -}}

{{- printf "%s-%s" .Chart.Name .Chart.Version | replace "+" "_" | trunc 63 | trimSuffix "-" -}}

{{- end -}}