From 6858f66a62416354a349d8090fcb45b5262056eb Mon Sep 17 00:00:00 2001 From: Sandro Date: Fri, 25 Apr 2025 19:38:02 +0200 Subject: Add check endpoint which can be used with nginx' auth_request function (#266) * Add check endpoint which can be used with nginx' auth_request function * feat(cmd): allow configuring redirect domains * test: add test environment for the nginx_auth PR This is a full local setup of the nginx_auth PR including HTTPS so that it's easier to validate in isolation. This requires an install of k3s (https://k3s.io) with traefik set to listen on localhost. This will be amended in the future but for now this works enough to ship it. Signed-off-by: Xe Iaso * fix(cmd|lib): allow empty redirect domains variable Signed-off-by: Xe Iaso * fix(test): add space to target variable in anubis container Signed-off-by: Xe Iaso * docs(admin): rewrite subrequest auth docs, make generic * docs(install): document REDIRECT_DOMAINS flag Signed-off-by: Xe Iaso * feat(lib): clamp redirects to the same HTTP host Only if REDIRECT_DOMAINS is not set. Signed-off-by: Xe Iaso --------- Signed-off-by: Xe Iaso Co-authored-by: Xe Iaso --- test/k8s/cert-manager/selfsigned-issuer.yaml | 6 ++++++ test/k8s/deps/cert-manager.yaml | 13 +++++++++++++ 2 files changed, 19 insertions(+) create mode 100644 test/k8s/cert-manager/selfsigned-issuer.yaml create mode 100644 test/k8s/deps/cert-manager.yaml (limited to 'test/k8s') diff --git a/test/k8s/cert-manager/selfsigned-issuer.yaml b/test/k8s/cert-manager/selfsigned-issuer.yaml new file mode 100644 index 0000000..07d2b7b --- /dev/null +++ b/test/k8s/cert-manager/selfsigned-issuer.yaml @@ -0,0 +1,6 @@ +apiVersion: cert-manager.io/v1 +kind: ClusterIssuer +metadata: + name: selfsigned +spec: + selfSigned: {} \ No newline at end of file diff --git a/test/k8s/deps/cert-manager.yaml b/test/k8s/deps/cert-manager.yaml new file mode 100644 index 0000000..f3e17fa --- /dev/null +++ b/test/k8s/deps/cert-manager.yaml @@ -0,0 +1,13 @@ +apiVersion: helm.cattle.io/v1 +kind: HelmChart +metadata: + name: cert-manager + namespace: kube-system +spec: + repo: https://charts.jetstack.io + chart: cert-manager + targetNamespace: cert-manager + createNamespace: true + set: + installCRDs: "true" + "prometheus.enabled": "false" \ No newline at end of file -- cgit v1.2.3