[AUTHENTICATION] Restructured keycloak and Oauth2-proxy 36/137736/23
authorAndreas Geissler <andreas-geissler@telekom.de>
Wed, 24 Apr 2024 13:38:24 +0000 (15:38 +0200)
committerAndreas Geissler <andreas-geissler@telekom.de>
Wed, 5 Jun 2024 11:49:50 +0000 (13:49 +0200)
commite9f67624d1f5e25d24c951e385661341baa21830
tree5c76da9347276454bee590369905b5b35b0489dc
parent53fe20dc15c0e23c27bee5c1450340e454b8945b
[AUTHENTICATION] Restructured keycloak and Oauth2-proxy

Changed keycloak-init to "authentication"
and moved as root chart
Moved oauth2-proxy to onap-authentication and updated
to version 7.5.4
Use TCL proposal for REALM creation.
Update keycloak-config-cli version to 5.12.0.
Ingress AuthorizationPolicy creation for all defined accessRoles
in the configured realms

Issue-ID: OOM-3292
Issue-ID: OOM-3268

Change-Id: I0901cd416ca5da871931d7cf084cd35c55f804f1
Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de>
75 files changed:
docs/sections/resources/yaml/keycloak-server-values.yaml
kubernetes/authentication/.helmignore [moved from kubernetes/platform/components/keycloak-init/.helmignore with 100% similarity]
kubernetes/authentication/Chart.yaml [moved from kubernetes/platform/components/keycloak-init/Chart.yaml with 83% similarity]
kubernetes/authentication/Makefile [moved from kubernetes/platform/components/oauth2-proxy/Makefile with 97% similarity]
kubernetes/authentication/README.md [new file with mode: 0644]
kubernetes/authentication/components/Makefile [moved from kubernetes/platform/components/keycloak-init/components/Makefile with 100% similarity]
kubernetes/authentication/components/keycloak-config-cli/.helmignore [moved from kubernetes/platform/components/keycloak-init/components/keycloak-config-cli/.helmignore with 100% similarity]
kubernetes/authentication/components/keycloak-config-cli/Chart.yaml [moved from kubernetes/platform/components/keycloak-init/components/keycloak-config-cli/Chart.yaml with 96% similarity]
kubernetes/authentication/components/keycloak-config-cli/templates/_helpers.tpl [moved from kubernetes/platform/components/keycloak-init/components/keycloak-config-cli/templates/_helpers.tpl with 100% similarity]
kubernetes/authentication/components/keycloak-config-cli/templates/job.yaml [moved from kubernetes/platform/components/keycloak-init/components/keycloak-config-cli/templates/job.yaml with 100% similarity]
kubernetes/authentication/components/keycloak-config-cli/templates/realms.yaml [moved from kubernetes/platform/components/keycloak-init/components/keycloak-config-cli/templates/realms.yaml with 100% similarity]
kubernetes/authentication/components/keycloak-config-cli/templates/secrets.yaml [moved from kubernetes/platform/components/keycloak-init/components/keycloak-config-cli/templates/secrets.yaml with 100% similarity]
kubernetes/authentication/components/keycloak-config-cli/values.yaml [moved from kubernetes/platform/components/keycloak-init/components/keycloak-config-cli/values.yaml with 98% similarity]
kubernetes/authentication/components/oauth2-proxy/.helmignore [moved from kubernetes/platform/components/oauth2-proxy/.helmignore with 100% similarity]
kubernetes/authentication/components/oauth2-proxy/Chart.yaml [moved from kubernetes/platform/components/oauth2-proxy/components/oauth2-proxy/Chart.yaml with 76% similarity]
kubernetes/authentication/components/oauth2-proxy/README.md [moved from kubernetes/platform/components/oauth2-proxy/components/oauth2-proxy/README.md with 85% similarity]
kubernetes/authentication/components/oauth2-proxy/ci/default-values.yaml [moved from kubernetes/platform/components/oauth2-proxy/components/oauth2-proxy/ci/default-values.yaml with 100% similarity]
kubernetes/authentication/components/oauth2-proxy/ci/extra-args-as-dict-values.yaml [moved from kubernetes/platform/components/oauth2-proxy/components/oauth2-proxy/ci/extra-args-as-dict-values.yaml with 100% similarity]
kubernetes/authentication/components/oauth2-proxy/ci/extra-args-as-list-values.yaml [moved from kubernetes/platform/components/oauth2-proxy/components/oauth2-proxy/ci/extra-args-as-list-values.yaml with 100% similarity]
kubernetes/authentication/components/oauth2-proxy/ci/extra-env-tpl-values.yaml [moved from kubernetes/platform/components/oauth2-proxy/components/oauth2-proxy/ci/extra-env-tpl-values.yaml with 100% similarity]
kubernetes/authentication/components/oauth2-proxy/ci/ingress-extra-paths-values.yaml [moved from kubernetes/platform/components/oauth2-proxy/components/oauth2-proxy/ci/ingress-extra-paths-values.yaml with 100% similarity]
kubernetes/authentication/components/oauth2-proxy/ci/pdb-values.yaml [moved from kubernetes/platform/components/oauth2-proxy/components/oauth2-proxy/ci/pdb-values.yaml with 100% similarity]
kubernetes/authentication/components/oauth2-proxy/ci/pod-security-context-values.yaml [moved from kubernetes/platform/components/oauth2-proxy/components/oauth2-proxy/ci/pod-security-context-values.yaml with 100% similarity]
kubernetes/authentication/components/oauth2-proxy/ci/redis-standalone-values.yaml [moved from kubernetes/platform/components/oauth2-proxy/components/oauth2-proxy/ci/redis-standalone-values.yaml with 82% similarity]
kubernetes/authentication/components/oauth2-proxy/ci/servicemonitor-values.yaml [new file with mode: 0644]
kubernetes/authentication/components/oauth2-proxy/ci/tpl-values.yaml [moved from kubernetes/platform/components/oauth2-proxy/components/oauth2-proxy/ci/tpl-values.yaml with 100% similarity]
kubernetes/authentication/components/oauth2-proxy/scripts/check-redis.sh [new file with mode: 0644]
kubernetes/authentication/components/oauth2-proxy/templates/NOTES.txt [new file with mode: 0644]
kubernetes/authentication/components/oauth2-proxy/templates/_capabilities.tpl [moved from kubernetes/platform/components/oauth2-proxy/components/oauth2-proxy/templates/_capabilities.tpl with 100% similarity]
kubernetes/authentication/components/oauth2-proxy/templates/_helpers.tpl [moved from kubernetes/platform/components/oauth2-proxy/components/oauth2-proxy/templates/_helpers.tpl with 66% similarity]
kubernetes/authentication/components/oauth2-proxy/templates/_ingress.tpl [moved from kubernetes/platform/components/oauth2-proxy/components/oauth2-proxy/templates/_ingress.tpl with 100% similarity]
kubernetes/authentication/components/oauth2-proxy/templates/configmap-authenticated-emails-file.yaml [moved from kubernetes/platform/components/oauth2-proxy/components/oauth2-proxy/templates/configmap-authenticated-emails-file.yaml with 92% similarity]
kubernetes/authentication/components/oauth2-proxy/templates/configmap-wait-for-redis.yaml [new file with mode: 0644]
kubernetes/authentication/components/oauth2-proxy/templates/configmap.yaml [moved from kubernetes/platform/components/oauth2-proxy/components/oauth2-proxy/templates/configmap.yaml with 89% similarity]
kubernetes/authentication/components/oauth2-proxy/templates/deployment.yaml [moved from kubernetes/platform/components/oauth2-proxy/components/oauth2-proxy/templates/deployment.yaml with 77% similarity]
kubernetes/authentication/components/oauth2-proxy/templates/deprecation.yaml [moved from kubernetes/platform/components/oauth2-proxy/components/oauth2-proxy/templates/deprecation.yaml with 100% similarity]
kubernetes/authentication/components/oauth2-proxy/templates/extra-manifests.yaml [moved from kubernetes/platform/components/oauth2-proxy/components/oauth2-proxy/templates/extra-manifests.yaml with 100% similarity]
kubernetes/authentication/components/oauth2-proxy/templates/google-secret.yaml [moved from kubernetes/platform/components/oauth2-proxy/components/oauth2-proxy/templates/google-secret.yaml with 89% similarity]
kubernetes/authentication/components/oauth2-proxy/templates/ingress.yaml [moved from kubernetes/platform/components/oauth2-proxy/components/oauth2-proxy/templates/ingress.yaml with 87% similarity]
kubernetes/authentication/components/oauth2-proxy/templates/poddisruptionbudget.yaml [moved from kubernetes/platform/components/oauth2-proxy/components/oauth2-proxy/templates/poddisruptionbudget.yaml with 90% similarity]
kubernetes/authentication/components/oauth2-proxy/templates/redis-secret.yaml [moved from kubernetes/platform/components/oauth2-proxy/components/oauth2-proxy/templates/redis-secret.yaml with 93% similarity]
kubernetes/authentication/components/oauth2-proxy/templates/secret-alpha.yaml [new file with mode: 0644]
kubernetes/authentication/components/oauth2-proxy/templates/secret-authenticated-emails-file.yaml [moved from kubernetes/platform/components/oauth2-proxy/components/oauth2-proxy/templates/secret-authenticated-emails-file.yaml with 93% similarity]
kubernetes/authentication/components/oauth2-proxy/templates/secret-htpasswd-file.yaml [moved from kubernetes/platform/components/oauth2-proxy/components/oauth2-proxy/templates/secret-htpasswd-file.yaml with 86% similarity]
kubernetes/authentication/components/oauth2-proxy/templates/secret.yaml [moved from kubernetes/platform/components/oauth2-proxy/components/oauth2-proxy/templates/secret.yaml with 66% similarity]
kubernetes/authentication/components/oauth2-proxy/templates/service.yaml [moved from kubernetes/platform/components/oauth2-proxy/components/oauth2-proxy/templates/service.yaml with 97% similarity]
kubernetes/authentication/components/oauth2-proxy/templates/serviceaccount.yaml [new file with mode: 0644]
kubernetes/authentication/components/oauth2-proxy/templates/servicemonitor.yaml [new file with mode: 0644]
kubernetes/authentication/components/oauth2-proxy/values.yaml [moved from kubernetes/platform/components/oauth2-proxy/components/oauth2-proxy/values.yaml with 73% similarity]
kubernetes/authentication/resources/oauth2_proxy.cfg [new file with mode: 0644]
kubernetes/authentication/templates/_utils.tpl [new file with mode: 0644]
kubernetes/authentication/templates/authorizationpolicy.yaml [new file with mode: 0644]
kubernetes/authentication/templates/configmap.yaml [new file with mode: 0644]
kubernetes/authentication/templates/requestauthentication.yaml [new file with mode: 0644]
kubernetes/authentication/templates/secret.yaml [moved from kubernetes/platform/components/keycloak-init/templates/secret.yaml with 61% similarity]
kubernetes/authentication/values.yaml [new file with mode: 0644]
kubernetes/onap/Chart.yaml
kubernetes/onap/resources/overrides/onap-all-ingress-gatewayapi.yaml
kubernetes/onap/resources/overrides/onap-all-ingress-istio.yaml
kubernetes/onap/resources/overrides/onap-all.yaml
kubernetes/onap/values.yaml
kubernetes/platform/Chart.yaml
kubernetes/platform/components/keycloak-init/Makefile [deleted file]
kubernetes/platform/components/keycloak-init/resources/realms/onap-realm.json [deleted file]
kubernetes/platform/components/keycloak-init/values.yaml [deleted file]
kubernetes/platform/components/oauth2-proxy/Chart.yaml [deleted file]
kubernetes/platform/components/oauth2-proxy/components/Makefile [deleted file]
kubernetes/platform/components/oauth2-proxy/components/oauth2-proxy/.helmignore [deleted file]
kubernetes/platform/components/oauth2-proxy/components/oauth2-proxy/ci/servicemonitor-values.yaml [deleted file]
kubernetes/platform/components/oauth2-proxy/components/oauth2-proxy/templates/NOTES.txt [deleted file]
kubernetes/platform/components/oauth2-proxy/components/oauth2-proxy/templates/configmap-alpha.yaml [deleted file]
kubernetes/platform/components/oauth2-proxy/components/oauth2-proxy/templates/serviceaccount.yaml [deleted file]
kubernetes/platform/components/oauth2-proxy/components/oauth2-proxy/templates/servicemonitor.yaml [deleted file]
kubernetes/platform/components/oauth2-proxy/values.yaml [deleted file]
kubernetes/platform/values.yaml