Commit bad18cd8 authored by Kevin Di Lallo's avatar Kevin Di Lallo
Browse files

switched endpoint authorization from a distibuted solution to a centralized... 

switched endpoint authorization from a distibuted solution to a centralized implementation in auth service
parent 2c9dd035

charts/grafana/values.yaml

+1 −2
Original line number Diff line number Diff line
@@ -123,9 +123,8 @@ ingress: 
  enabled: true

  annotations:

    nginx.ingress.kubernetes.io/rewrite-target: /$2

    nginx.ingress.kubernetes.io/auth-url: https://10.190.114.150/auth/v1/authenticate?svc=grafana&sbox=

    nginx.ingress.kubernetes.io/auth-url: https://$http_host/auth/v1/authenticate?svc=grafana

    kubernetes.io/ingress.class: nginx

    # kubernetes.io/tls-acme: "true"

  labels: {}

  path: /grafana(/|$)(.*)

  hosts:

charts/meep-auth-svc/values.yaml

+1 −9
Original line number Diff line number Diff line
@@ -57,23 +57,15 @@ service: 


ingress:

  enabled: true

  # Used to create an Ingress record.

  hosts:

    - name: ''

      paths:

        - /auth

  annotations:

    kubernetes.io/ingress.class: nginx

    # kubernetes.io/tls-acme: "true"

    # nginx.ingress.kubernetes.io/rewrite-target: /$2

    # nginx.ingress.kubernetes.io/configuration-snippet: |

    #   rewrite ^(/api)$ $1/ redirect;

  labels: {}

  tls:

    # Secrets must be manually created in the namespace.

    # - secretName: chart-example-tls

    #   hosts:

    #     - chart-example.local





codecov:

  enabled: false

charts/meep-gis-engine/values-template.yaml

+1 −7
Original line number Diff line number Diff line
@@ -25,7 +25,6 @@ service: 


ingress:

  enabled: true

  # Used to create an Ingress record.

  hosts:

    - name: ''

      paths:
@@ -33,16 +32,11 @@ ingress: 
  annotations:

    kubernetes.io/ingress.class: nginx

    nginx.ingress.kubernetes.io/force-ssl-redirect: {{ .HttpsOnly }}

    # kubernetes.io/tls-acme: "true"

    # nginx.ingress.kubernetes.io/rewrite-target: /$2

    nginx.ingress.kubernetes.io/auth-url: https://$http_host/auth/v1/authenticate?svc=meep-gis-engine&sbox={{ .SandboxName }}

    nginx.ingress.kubernetes.io/configuration-snippet: |

      rewrite ^/{{ .SandboxName }}/gis(/|$)(.*)$ /gis/$2 break;

  labels: {}

  tls:

    # Secrets must be manually created in the namespace.

    # - secretName: chart-example-tls

    #   hosts:

    #     - chart-example.local



codecov:

  enabled: false

charts/meep-loc-serv/values-template.yaml

+1 −7
Original line number Diff line number Diff line
@@ -26,7 +26,6 @@ service: 


ingress:

  enabled: true

  # Used to create an Ingress record.

  hosts:

    - name: ''

      paths:
@@ -34,16 +33,11 @@ ingress: 
  annotations:

    kubernetes.io/ingress.class: nginx

    nginx.ingress.kubernetes.io/force-ssl-redirect: {{ .HttpsOnly }}

    # kubernetes.io/tls-acme: "true"

    # nginx.ingress.kubernetes.io/rewrite-target: /$2

    nginx.ingress.kubernetes.io/auth-url: https://$http_host/auth/v1/authenticate?svc=meep-loc-serv&sbox={{ .SandboxName }}

    nginx.ingress.kubernetes.io/configuration-snippet: |

      rewrite ^/{{ .SandboxName }}/location(/|$)(.*)$ /location/$2 break;

  labels: {}

  tls:

    # Secrets must be manually created in the namespace.

    # - secretName: chart-example-tls

    #   hosts:

    #     - chart-example.local



codecov:

  enabled: false

charts/meep-metrics-engine/values-template.yaml

+1 −7
Original line number Diff line number Diff line
@@ -26,7 +26,6 @@ service: 


ingress:

  enabled: true

  # Used to create an Ingress record.

  hosts:

    - name: ''

      paths:
@@ -34,16 +33,11 @@ ingress: 
  annotations:

    kubernetes.io/ingress.class: nginx

    nginx.ingress.kubernetes.io/force-ssl-redirect: {{ .HttpsOnly }}

    # kubernetes.io/tls-acme: "true"

    # nginx.ingress.kubernetes.io/rewrite-target: /$2

    nginx.ingress.kubernetes.io/auth-url: https://$http_host/auth/v1/authenticate?svc=meep-metrics-engine&sbox={{ .SandboxName }}

    nginx.ingress.kubernetes.io/configuration-snippet: |

      rewrite ^/{{ .SandboxName }}/metrics(/|$)(.*)$ /metrics/$2 break;

  labels: {}

  tls:

    # Secrets must be manually created in the namespace.

    # - secretName: chart-example-tls

    #   hosts:

    #     - chart-example.local



codecov:

  enabled: false