Skip to content

Commit 7d616d8

Browse files
james-d-elliottCrowley723
james-d-elliott
and
Crowley723
authored
feat: v4.39.0 (#282)
* feat: v4.39.0 * feat: adjustments * Update charts/authelia/README.md Co-authored-by: Brynn Crowley <[email protected]> Signed-off-by: James Elliott <[email protected]> * fix: syntax --------- Signed-off-by: James Elliott <[email protected]> Co-authored-by: Brynn Crowley <[email protected]>
1 parent c208f8d commit 7d616d8

11 files changed

+797
-138
lines changed

‎charts/authelia/BREAKING.md

Lines changed: 63 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -3,6 +3,69 @@
33
During the beta we will generally not be documenting breaking chart changes but there are exceptions and they are noted
44
below.
55

6+
## 0.10.0
7+
8+
This chart will be the required version for 4.39.0 and it will have a couple minor changes to the configuration.
9+
10+
### WebAuthn User Verification
11+
12+
**_This change will cause an error when doing a `helm install` for 4.39.0 if you do not fix it._**
13+
14+
A lot of additional options have been added to the helm chart in 4.39.0, this has resulted in a single option being
15+
reorganized.
16+
17+
Before:
18+
19+
```yaml
20+
configMap:
21+
webauthn:
22+
user_verification: 'preferred'
23+
```
24+
25+
After:
26+
27+
```yaml
28+
configMap:
29+
webauthn:
30+
selection_criteria:
31+
user_verification: 'preferred'
32+
```
33+
34+
### Access Control Networks
35+
36+
**_This change will cause an error when doing a `helm install` for 4.39.0 if you do not fix it._**
37+
38+
The networks section in access control has been moved to a definitions section where the networks can be reused in
39+
multiple places. While automatic mapping is available without the chart, the chart will require this adjustment for
40+
anyone running 4.39.0.
41+
42+
Before:
43+
44+
```yaml
45+
configMap:
46+
access_control:
47+
networks:
48+
- name: 'example'
49+
networks:
50+
- '192.168.1.0/24'
51+
- '192.168.2.20'
52+
- '2001:db8::/32'
53+
- '2001:db8:1234:5678::1'
54+
```
55+
56+
After:
57+
58+
```yaml
59+
configMap:
60+
definitions:
61+
network:
62+
example:
63+
- '192.168.1.0/24'
64+
- '192.168.2.20'
65+
- '2001:db8::/32'
66+
- '2001:db8:1234:5678::1'
67+
```
68+
669
## 0.9.0
770

871
While we have aimed to keep documented backwards compatability for previous versions of Authelia deployed with the chart

‎charts/authelia/Chart.yaml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
apiVersion: v2
22
name: authelia
3-
version: 0.9.17
3+
version: 0.10.0
44
kubeVersion: ">= 1.13.0-0"
55
description: Authelia is a Single Sign-On Multi-Factor portal for web apps
66
type: application
@@ -38,6 +38,6 @@ maintainers:
3838
email: [email protected]
3939
url: https://github.com/james-d-elliott
4040
icon: https://avatars2.githubusercontent.com/u/59122411?s=200&v=4
41-
appVersion: 4.38.19
41+
appVersion: 4.39.0
4242
deprecated: false
4343
annotations: {}

‎charts/authelia/README.md

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -12,6 +12,7 @@ Breaking changes with this chart should be expected during the v0.x.x versions a
1212
breaking changes within minor releases i.e. from v0.1.0 to v0.2.0. The following versions have notable breaking changes
1313
which users should be aware of:
1414

15+
- [v0.10.0](https://github.com/authelia/chartrepo/blob/master/charts/authelia/BREAKING.md#0100)
1516
- [v0.9.0](https://github.com/authelia/chartrepo/blob/master/charts/authelia/BREAKING.md#090)
1617
- [v0.5.0](https://github.com/authelia/chartrepo/blob/master/charts/authelia/BREAKING.md#050)
1718

‎charts/authelia/files/configuration.acl.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
access_control:
22
default_policy: {{ include "authelia.accessControl.defaultPolicy" . | trim | squote }}
3-
{{- if .Values.configMap.access_control.networks }}
3+
{{- if and .Values.configMap.access_control.networks (semverCompare "<4.39.0" (include "authelia.version" $)) }}
44
networks:
55
{{- range $network := .Values.configMap.access_control.networks }}
66
- name: {{ $network.name }}

‎charts/authelia/files/configuration.oidc.client.yaml

Lines changed: 41 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -47,6 +47,9 @@
4747
{{- if .Client.lifespan }}
4848
lifespan: {{ .Client.lifespan | squote }}
4949
{{- end }}
50+
{{- if and .Client.claims_policy (semverCompare ">=4.39.0" (include "authelia.version" $)) }}
51+
claims_policy: {{ .Client.claims_policy | squote }}
52+
{{- end }}
5053
{{- if .Client.requested_audience_mode }}
5154
requested_audience_mode: {{ .Client.requested_audience_mode | squote }}
5255
{{- end }}
@@ -62,17 +65,54 @@
6265
pkce_challenge_method: {{ (include "authelia.config.oidc.client.pkce_challenge_method" .Client) | squote }}
6366
authorization_signed_response_alg: {{ .Client.authorization_signed_response_alg | default "none" | squote }}
6467
authorization_signed_response_key_id: {{ .Client.authorization_signed_response_key_id | default "" | squote }}
68+
{{- if semverCompare ">=4.39.0" (include "authelia.version" $) }}
69+
authorization_encrypted_response_key_id: {{ .Client.authorization_encrypted_response_key_id | default "" | squote }}
70+
authorization_encrypted_response_alg: {{ .Client.authorization_encrypted_response_alg | default "none" | squote }}
71+
authorization_encrypted_response_enc: {{ .Client.authorization_encrypted_response_enc | default "A128CBC-HS256" | squote }}
72+
{{- end }}
6573
id_token_signed_response_alg: {{ .Client.id_token_signed_response_alg | default "RS256" | squote }}
6674
id_token_signed_response_key_id: {{ .Client.id_token_signed_response_key_id | default "" | squote }}
75+
{{- if semverCompare ">=4.39.0" (include "authelia.version" $) }}
76+
id_token_encrypted_response_key_id: {{ .Client.id_token_encrypted_response_key_id | default "" | squote }}
77+
id_token_encrypted_response_alg: {{ .Client.id_token_encrypted_response_alg | default "none" | squote }}
78+
id_token_encrypted_response_enc: {{ .Client.id_token_encrypted_response_enc | default "A128CBC-HS256" | squote }}
79+
{{- end }}
6780
access_token_signed_response_alg: {{ .Client.access_token_signed_response_alg | default "none" | squote }}
6881
access_token_signed_response_key_id: {{ .Client.access_token_signed_response_key_id | default "" | squote }}
82+
{{- if semverCompare ">=4.39.0" (include "authelia.version" $) }}
83+
access_token_encrypted_response_key_id: {{ .Client.access_token_encrypted_response_key_id | default "" | squote }}
84+
access_token_encrypted_response_alg: {{ .Client.access_token_encrypted_response_alg | default "none" | squote }}
85+
access_token_encrypted_response_enc: {{ .Client.access_token_encrypted_response_enc | default "A128CBC-HS256" | squote }}
86+
{{- end }}
6987
userinfo_signed_response_alg: {{ .Client.userinfo_signed_response_alg | default "none" | squote }}
7088
userinfo_signed_response_key_id: {{ .Client.userinfo_signed_response_key_id | default "" | squote }}
89+
{{- if semverCompare ">=4.39.0" (include "authelia.version" $) }}
90+
userinfo_encrypted_response_key_id: {{ .Client.userinfo_encrypted_response_key_id | default "" | squote }}
91+
userinfo_encrypted_response_alg: {{ .Client.userinfo_encrypted_response_alg | default "none" | squote }}
92+
userinfo_encrypted_response_enc: {{ .Client.userinfo_encrypted_response_enc | default "A128CBC-HS256" | squote }}
93+
{{- end }}
7194
introspection_signed_response_alg: {{ .Client.introspection_signed_response_alg | default "none" | squote }}
7295
introspection_signed_response_key_id: {{ .Client.introspection_signed_response_key_id | default "" | squote }}
96+
{{- if semverCompare ">=4.39.0" (include "authelia.version" $) }}
97+
introspection_encrypted_response_key_id: {{ .Client.introspection_encrypted_response_key_id | default "" | squote }}
98+
introspection_encrypted_response_alg: {{ .Client.introspection_encrypted_response_alg | default "none" | squote }}
99+
introspection_encrypted_response_enc: {{ .Client.introspection_encrypted_response_enc | default "A128CBC-HS256" | squote }}
100+
introspection_endpoint_auth_method: {{ .Client.introspection_endpoint_auth_method | default "client_secret_basic" | squote }}
101+
introspection_endpoint_auth_signing_alg: {{ .Client.introspection_endpoint_auth_signing_alg | default "RS256" | squote }}
102+
{{- end }}
73103
request_object_signing_alg: {{ .Client.request_object_signing_alg | default "" | squote }}
74-
token_endpoint_auth_signing_alg: {{ .Client.token_endpoint_auth_signing_alg | default "" | squote }}
104+
{{- if semverCompare ">=4.39.0" (include "authelia.version" $) }}
105+
request_object_encryption_alg: {{ .Client.request_object_encryption_alg | default "none" | squote }}
106+
request_object_encryption_enc: {{ .Client.request_object_encryption_enc | default "A128CBC-HS256" | squote }}
107+
{{- end }}
75108
token_endpoint_auth_method: {{ (include "authelia.config.oidc.client.token_endpoint_auth_method" .Client) | squote }}
109+
token_endpoint_auth_signing_alg: {{ .Client.token_endpoint_auth_signing_alg | default "" | squote }}
110+
{{- if semverCompare ">=4.39.0" (include "authelia.version" $) }}
111+
revocation_endpoint_auth_method: {{ .Client.revocation_endpoint_auth_method | default "client_secret_basic" | squote }}
112+
revocation_endpoint_auth_signing_alg: {{ .Client.revocation_endpoint_auth_signing_alg | default "RS256" | squote }}
113+
pushed_authorization_request_endpoint_auth_method: {{ .Client.pushed_authorization_request_endpoint_auth_method | default "client_secret_basic" | squote }}
114+
pushed_authorization_request_endpoint_auth_signing_alg: {{ .Client.pushed_authorization_request_endpoint_auth_signing_alg | default "RS256" | squote }}
115+
{{- end }}
76116
{{- if .Client.jwks_uri }}
77117
jwks_uri: {{ .Client.jwks_uri | squote }}
78118
{{- end }}

‎charts/authelia/files/configuration.server.endpoints.authz.yaml

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -10,5 +10,8 @@
1010
- {{ . | squote }}
1111
{{- end }}
1212
{{- end }}
13+
{{- if semverCompare ">=4.39.0" (include "authelia.version" $) }}
14+
scheme_basic_cache_lifespan: {{ $strategy.scheme_basic_cache_lifespan | default 0 }}
15+
{{- end }}
1316
{{- end }}
1417
{{- end }}

0 commit comments

Comments
 (0)