@@ -63,8 +63,48 @@ the option they want rather than having to wrestle the chart into obedience.
63
63
As originally planned we've overhauled the secrets configuration. In part to adapt to the new changes and also to make
64
64
the feature much easier to understand.
65
65
66
+ These changes are separated into two distinct elements:
67
+
68
+ 1 . The secrets are now local to where they're used in the configuration instead of in a single location.
69
+ 1 . This has the advantage of if you're for example configuring PostgreSQL that you configure the username and
70
+ password at the same time.
71
+ 2 . The implementation specifics have been adjusted so the syntax for all secrets is generally the same.
72
+ 3 . You're able to include varied secrets instead of the single secret like before.
73
+
74
+ The following section shows a before and after look at the secret generation method.
75
+
76
+ Before:
77
+
78
+ ``` yaml
79
+ name :
80
+ key : ' KEY_NAME'
81
+ value : " "
82
+ filename : ' FILE_NAME'
83
+ ` ` `
84
+
85
+ After:
86
+
87
+ ` ` ` yaml
88
+ secret :
89
+ # # Disables this secret allowing you to handle it yourself in any way you see fit.
90
+ disabled : false
91
+
92
+ # # Sets the name of the secret to use. The ~ value indicates the internal secret. Value will be mounted into the
93
+ # # '/secrets/<secret_name>/<path>' location, where secret_name for ~ is 'internal'.
94
+ secret_name : ~
95
+
96
+ # # When using the internal secret this allows setting the value arbitrarily. Only required on the first `helm install`
97
+ # # or `helm upgrade`, after which it's only required to overwrite it.
98
+ value : ' '
99
+
100
+ # # Key name within the secret which is the mounted location.
101
+ path : ' FILE_NAME'
102
+ ` ` `
103
+
66
104
The chart itself is now capable of both generating multiple secrets and utilizing a mix of existing secrets and
67
- generated ones. These settings are configured on a per configuration section basis.
105
+ generated ones. These settings are configured on a per configuration section basis specifically in the configMap
106
+ section. Above is an example of the way a secret is loaded into the Authelia config, and an example usage can be seen
107
+ with ` .configMap.storage.postgres.password`.
68
108
69
109
The HashiCorp Vault Injector options have been removed as they should be configurable via the relevant
70
110
labels/annotations. If it's unclear how to achieve a specific chart output value that you need for this purpose please
@@ -94,7 +134,9 @@ The domain value has been removed and is now part of the session section. Each c
94
134
generate relevant manifests such as ingresses. This is so we can properly facilitate the multi-cookie domain
95
135
configurations. This also affects the default redirection URL which is no longer supported on 4.38.0 helm installations.
96
136
97
- See below for representations of the YAML changes (before and after respectively).
137
+ See below for representations of the YAML changes.
138
+
139
+ Before :
98
140
99
141
` ` ` yaml
100
142
domain: 'example.com'
@@ -104,6 +146,8 @@ configMap:
104
146
default_redirection_url: 'https://www.example.com'
105
147
` ` `
106
148
149
+ After :
150
+
107
151
` ` ` yaml
108
152
configMap:
109
153
session:
0 commit comments