This commit is contained in:
2023-10-18 16:57:40 +02:00
parent 9b172c24ae
commit 8661e6bef9
15 changed files with 520 additions and 180 deletions

View File

@@ -1,4 +1,5 @@
resource "kubectl_manifest" "oauth2-secret" {
count = var.use-oauth?1:0
ignore_fields = ["metadata.annotations"]
yaml_body = <<-EOF
apiVersion: "secretgenerator.mittwald.de/v1alpha1"
@@ -15,6 +16,7 @@ resource "kubectl_manifest" "oauth2-secret" {
EOF
}
data "kubernetes_secret_v1" "oauth2-client-id" {
count = var.use-oauth?1:0
depends_on = [kubectl_manifest.oauth2-secret]
metadata {
name = kubectl_manifest.oauth2-secret.name
@@ -41,6 +43,7 @@ data "authentik_flow" "default-authentication-flow" {
}
resource "authentik_provider_oauth2" "oauth2" {
count = var.use-oauth?1:0
name = "${var.component}-${var.instance}"
client_id = "${data.kubernetes_secret_v1.oauth2-client-id.data["client-id"]}"
authentication_flow = data.authentik_flow.default-authentication-flow.id
@@ -55,6 +58,7 @@ resource "authentik_provider_oauth2" "oauth2" {
}
resource "kubernetes_secret_v1" "oauth2-client-secret" {
count = var.use-oauth?1:0
metadata {
name = "${var.component}-${var.instance}-secret"
namespace = var.namespace