-
Notifications
You must be signed in to change notification settings - Fork 147
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Feat: prepare for the 1.6.0-beta.1 version
Signed-off-by: barnettZQG <[email protected]>
- Loading branch information
1 parent
302c169
commit 1842415
Showing
36 changed files
with
846 additions
and
616 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,136 @@ | ||
import ( | ||
"encoding/json" | ||
) | ||
|
||
metadata: { | ||
scope: "system" | ||
name: "dex-connector" | ||
alias: "Dex Connector" | ||
description: "Configure the connectors for the Dex" | ||
sensitive: false | ||
} | ||
|
||
template: { | ||
output: { | ||
apiVersion: "v1" | ||
kind: "Secret" | ||
metadata: { | ||
name: context.name | ||
namespace: context.namespace | ||
labels: { | ||
"config.oam.dev/sub-type": parameter.type | ||
} | ||
} | ||
type: "Opaque" | ||
|
||
if parameter.type == "github" && parameter.github != _|_ { | ||
stringData: github: json.Marshal(parameter.github) | ||
} | ||
if parameter.type == "ldap" && parameter.ldap != _|_ { | ||
stringData: ldap: json.Marshal(parameter.ldap) | ||
} | ||
if parameter.type == "oidc" && parameter.oidc != _|_ { | ||
stringData: oidc: json.Marshal(parameter.oidc) | ||
} | ||
if parameter.type == "gitlab" && parameter.gitlab != _|_ { | ||
stringData: gitlab: json.Marshal(parameter.gitlab) | ||
} | ||
if parameter.type == "saml" && parameter.saml != _|_ { | ||
stringData: saml: json.Marshal(parameter.saml) | ||
} | ||
if parameter.type == "google" && parameter.google != _|_ { | ||
stringData: google: json.Marshal(parameter.google) | ||
} | ||
} | ||
parameter: { | ||
// +usage=Connetor type | ||
type: *"github" | "ldap" | "gitlab" | "oidc" | "saml" | "google" | ||
// +usage=GitHub connector | ||
github?: { | ||
// +usage=GitHub client ID | ||
clientID: string | ||
// +usage=GitHub client secret | ||
clientSecret: string | ||
// +usage=GitHub redirect URI | ||
redirectURI: string | ||
} | ||
// +usage=LDAP connector | ||
ldap?: { | ||
// +usage=Host and optional port of the LDAP server in the form "host:port". | ||
host: string | ||
// +usage=The DN and password for an application service account. The connector uses these credentials to search for users and groups. Not required if the LDAP server provides access for anonymous auth. | ||
bindDN?: string | ||
// +usage=The password of the DN | ||
bindPW?: string | ||
// +usage=This field is required if the LDAP host is not using TLS (port 389). | ||
insecureNoSSL: *true | bool | ||
// +usage=If a custom certificate isn't provide, this option can be used to turn on | ||
insecureSkipVerify?: bool | ||
// +usage=If unspecified, connections will use the ldaps:// protocol | ||
startTLS?: bool | ||
// +usage=Path to a trusted root certificate file. Default: use the host's root CA. | ||
rootCA?: string | ||
// +usage=The attribute to display in the provided password prompt. If unset, will display "Username" | ||
usernamePrompt?: string | ||
// +usage=User search maps a username and password entered by a user to a LDAP entry. | ||
userSearch: { | ||
// +usage=BaseDN to start the search from. It will translate to the query "(&(objectClass=person)(uid=<username>))". | ||
baseDN: string | ||
// +usage=username attribute used for comparing user entries. This will be translated and combined with the other filter as "(<attr>=<username>)". | ||
username: *"uid" | string | ||
// +usage=The following three fields are direct mappings of attributes on the user entry. String representation of the user. | ||
idAttr: *"uid" | string | ||
// +usage=Attribute to map to Email. | ||
emailAttr: *"mail" | string | ||
// +usage=Maps to display name of users. No default value. | ||
nameAttr: *"uid" | string | ||
// +usage=Optional filter to apply when searching the directory. | ||
filter?: string | ||
} | ||
} | ||
// +usage=GitLab connector | ||
gitlab?: { | ||
// +usage=default to https://gitlab.com | ||
baseURL?: string | ||
// +usage=GitLab client ID | ||
clientID: string | ||
// +usage=GitLab client secret | ||
clientSecret: string | ||
// +usage=GitLab redirect URI | ||
redirectURI: string | ||
} | ||
// +usage=OIDC connector | ||
oidc?: { | ||
// +usage=Canonical URL of the provider, also used for configuration discovery. This value MUST match the value returned in the provider config discovery. See: https://openid.net/specs/openid-connect-discovery-1_0.html#ProviderConfig | ||
issuer: string | ||
// +usage=OIDC client ID | ||
clientID: string | ||
// +usage=OIDC client secret | ||
clientSecret: string | ||
// +usage=OIDC redirect URI | ||
redirectURI: string | ||
} | ||
// +usage=Google connector | ||
google?: { | ||
// +usage=Google client ID | ||
clientID: string | ||
// +usage=Google client secret | ||
clientSecret: string | ||
// +usage=Google redirect URI | ||
redirectURI: string | ||
} | ||
// +usage=SAML connector | ||
saml?: { | ||
// +usage=SSO URL used for POST value. | ||
ssoURL: string | ||
// +usage=CA to use when validating the signature of the SAML response. | ||
ca: string | ||
// +usage=SAML redirect URI | ||
redirectURI: string | ||
// +usage=Name of attributes in the returned assertions to map to ID token claims. | ||
usernameAttr: string | ||
// +usage=Email of attributes in the returned assertions to map to ID token claims. | ||
emailAttr: string | ||
} | ||
} | ||
} |
This file was deleted.
Oops, something went wrong.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
17 changes: 5 additions & 12 deletions
17
...cd/definitions/config-helm-repository.cue → ...uxcd/config-templates/helm-repository.cue
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
|
@@ -10,4 +10,4 @@ tags: | |
- Helm | ||
|
||
system: | ||
vela: ">=1.5.0" | ||
vela: ">=v1.6.0-beta.1" |
Oops, something went wrong.