Peter Kurfer
3c13eb0d6b
- when setting an OIDC issuer URL the defaulter will fetch and set authorization and token endpoints - basic auth allows to use either inline hashed credentials or plaintext credentials from a secret that are automatically hashed - finish TLS support for API & dashboard listeners
53 lines
1.4 KiB
YAML
53 lines
1.4 KiB
YAML
---
|
|
apiVersion: supabase.k8s.icb4dc0.de/v1alpha1
|
|
kind: APIGateway
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/name: supabase-operator
|
|
app.kubernetes.io/managed-by: kustomize
|
|
name: gateway-sample
|
|
namespace: supabase-demo
|
|
spec:
|
|
envoy:
|
|
disableIPv6: true
|
|
apiEndpoint:
|
|
jwks:
|
|
name: core-sample-jwt
|
|
key: jwks.json
|
|
dashboardEndpoint:
|
|
tls:
|
|
cert:
|
|
secretName: dashboard-tls-cert
|
|
auth:
|
|
oauth2:
|
|
openIdIssuer: "https://login.microsoftonline.com/f4e80111-1571-477a-b56d-c5fe517676b7/"
|
|
clientId: 3528016b-f6e3-49be-8fb3-f9a9a2ab6c3f
|
|
scopes:
|
|
- openid
|
|
- profile
|
|
- email
|
|
clientSecretRef:
|
|
name: studio-sample-oauth2
|
|
key: clientSecret
|
|
---
|
|
apiVersion: cert-manager.io/v1
|
|
kind: Certificate
|
|
metadata:
|
|
labels:
|
|
app.kubernetes.io/name: certificate
|
|
app.kubernetes.io/instance: dashboard-tls
|
|
app.kubernetes.io/component: certificate
|
|
app.kubernetes.io/created-by: supabase-operator
|
|
app.kubernetes.io/part-of: supabase-operator
|
|
app.kubernetes.io/managed-by: kustomize
|
|
name: dashboard-tls
|
|
namespace: supabase-demo
|
|
spec:
|
|
dnsNames:
|
|
- gateway-sample-envoy.supabase-demo.svc
|
|
- gateway-sample-envoy.supabase-demo.svc.cluster.local
|
|
- localhost:3000
|
|
issuerRef:
|
|
kind: ClusterIssuer
|
|
name: cluster-pki
|
|
secretName: dashboard-tls-cert
|