add new auth to coder

This commit is contained in:
Morten Olsen
2026-01-01 20:47:15 +01:00
parent 4e0b6ed008
commit 6bf0048f5b
2 changed files with 14 additions and 7 deletions

View File

@@ -0,0 +1 @@
{{ include "common.oidc" . }}

View File

@@ -10,19 +10,25 @@ deployment:
strategy: Recreate strategy: Recreate
replicas: 1 replicas: 1
revisionHistoryLimit: 0 revisionHistoryLimit: 0
serviceAccountName: "{release}-serviceaccount" # Will be templated serviceAccountName: "{release}-serviceaccount" # Will be templated
# Container configuration # Container configuration
container: container:
port: 7080 port: 7080
healthProbe: healthProbe:
type: tcpSocket type: tcpSocket
port: http # Use named port port: http # Use named port
# Service configuration # Service configuration
service: service:
port: 80 port: 80
type: ClusterIP type: ClusterIP
#
# OIDC client
oidc:
enabled: true
redirectUris:
- "/api/v2/users/oidc/callback"
# Volume configuration # Volume configuration
volumes: volumes:
@@ -49,7 +55,7 @@ env:
CODER_OIDC_GROUP_FIELD: groups CODER_OIDC_GROUP_FIELD: groups
CODER_ACCESS_URL: CODER_ACCESS_URL:
value: "https://{subdomain}.{domain}" value: "https://{subdomain}.{domain}"
CODER_OIDC_ICON_URL: "https://authentik.olsen.cloud/static/dist/assets/icons/icon.png" CODER_OIDC_ICON_URL: "https://{subdomain}.{domain}/static/dist/assets/icons/icon.png"
CODER_DISABLE_PASSWORD_AUTH: "true" CODER_DISABLE_PASSWORD_AUTH: "true"
CODER_OAUTH2_GITHUB_ALLOW_SIGNUPS: "false" CODER_OAUTH2_GITHUB_ALLOW_SIGNUPS: "false"
CODER_OIDC_SIGN_IN_TEXT: "Sign in with OIDC" CODER_OIDC_SIGN_IN_TEXT: "Sign in with OIDC"
@@ -57,15 +63,15 @@ env:
CODER_OIDC_ISSUER_URL: CODER_OIDC_ISSUER_URL:
valueFrom: valueFrom:
secretKeyRef: secretKeyRef:
name: "{release}-client" name: "{release}-oidc-credentials"
key: configurationIssuer key: issuer
CODER_OIDC_CLIENT_ID: CODER_OIDC_CLIENT_ID:
valueFrom: valueFrom:
secretKeyRef: secretKeyRef:
name: "{release}-client" name: "{release}-oidc-credentials"
key: clientId key: clientId
CODER_OIDC_CLIENT_SECRET: CODER_OIDC_CLIENT_SECRET:
valueFrom: valueFrom:
secretKeyRef: secretKeyRef:
name: "{release}-client" name: "{release}-oidc-credentials"
key: clientSecret key: clientSecret