Skip to content

Commit f867fd3

Browse files
authored
Scope down default deployment (#412)
* scope down default deployment * fix wrong flag
1 parent 73febc8 commit f867fd3

2 files changed

Lines changed: 10 additions & 2 deletions

File tree

deploy/charts/backend/templates/deployment.yaml

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -76,6 +76,9 @@ spec:
7676
{{- if .Values.backend.consumerScope }}
7777
- --consumer-scope={{ .Values.backend.consumerScope }}
7878
{{- end }}
79+
{{- if .Values.backend.clusterScopeIsolation }}
80+
- --cluster-scoped-isolation={{ .Values.backend.clusterScopeIsolation }}
81+
{{- end }}
7982
{{- if .Values.backend.cookieSigningKey }}
8083
- --cookie-signing-key={{ .Values.backend.cookieSigningKey }}
8184
{{- end }}
@@ -91,6 +94,9 @@ spec:
9194
{{- else if eq .Values.backend.oidc.type "external" }}
9295
- --oidc-type=external
9396
{{- end }}
97+
{{- if .Values.backend.loggingLevel }}
98+
- -v={{ .Values.backend.loggingLevel }}
99+
{{- end }}
94100
ports:
95101
{{- if .Values.backend.tls.enabled }}
96102
- name: https

deploy/charts/backend/values.yaml

Lines changed: 4 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -10,6 +10,7 @@ backend:
1010
listenAddress: "0.0.0.0:8080"
1111
externalAddress: ""
1212
externalServerName: ""
13+
loggingLevel: 2
1314
tls:
1415
enabled: false
1516
certSecretName: ""
@@ -25,8 +26,9 @@ backend:
2526
# General backend configuration
2627
prettyName: ""
2728
namespacePrefix: "kube-bind-"
28-
consumerScope: "cluster"
29-
29+
consumerScope: "namespaced"
30+
clusterScopeIsolation: "prefix" # Options: none, prefix, namespaced
31+
3032
# Cookie configuration - these should be base64 encoded keys
3133
# Empty values - will generate random keys on each start (not for production!)
3234
cookieSigningKey: ""

0 commit comments

Comments
 (0)