This commit includes the complete Kubernetes infrastructure deployment for NGE6: - Crossplane setup with providers (Kubernetes, Helm, Civo) - Ambassador/Emissary ingress controller with SSL termination - Cert-manager with Let's Encrypt and Gandi webhook for DNS01 challenges - ExternalDNS integration with Gandi for automatic DNS management - Keycloak authentication server with PostgreSQL - Pomerium identity-aware proxy with OIDC integration - Forgejo Git server with persistent storage and authentication - Spire/SPIFFE for secure service communication All services are deployed using Infrastructure as Code principles with Crossplane managing Kubernetes and Helm resources declaratively. 🤖 Generated with [Claude Code](https://claude.ai/code) Co-Authored-By: Claude <noreply@anthropic.com>
41 lines
1.3 KiB
Text
41 lines
1.3 KiB
Text
{{- if eq (include "pomerium.providerOK" .) "true" }}
|
|
{{- if .Values.ingress.enabled }}
|
|
From outside the cluster, the route URL(s) are:
|
|
{{- range .Values.config.routes }}
|
|
{{ .from | quote}}
|
|
{{- end }}
|
|
{{- end }}
|
|
{{- else -}}
|
|
##############################################################################
|
|
#### ERROR: You did not set a valid identity provider ####
|
|
##############################################################################
|
|
|
|
This deployment will be incomplete until you configure a valid identity provider.
|
|
|
|
Currently supported providers:
|
|
|
|
- Auth0
|
|
- Azure Active Directory
|
|
- AWS Cognito
|
|
- GitHub
|
|
- GitLab
|
|
- Google
|
|
- Okta
|
|
- OneLogin
|
|
- Ping
|
|
|
|
See the values.yaml file to see what values are required for each provider.
|
|
|
|
If you are having trouble with the configuration of a provider please visit
|
|
the official documentation:
|
|
|
|
https://www.pomerium.io/docs/identity-providers.html
|
|
{{- end }}
|
|
|
|
{{- if .Values.config.insecure }}
|
|
##############################################################################
|
|
#### DANGER: You have disabled TLS!
|
|
####
|
|
#### Please only do this if you absolutely know what you are doing.
|
|
##############################################################################
|
|
{{- end }}
|