Merge pull request #42 from kubero-dev/feature/add-basic-auth

Feature / Add basic auth

Author: mms-gianni

VERSION

@@ -1 +1 @@
-0.1.6
+0.1.7-rc.7

helm-charts/kuberoapp/templates/ingress.yaml

@@ -18,10 +18,15 @@ metadata:
   name: {{ $fullName }}
   labels:
     {{- include "kuberoapp.labels" . | nindent 4 }}
-  {{- with .Values.ingress.annotations }}
   annotations:
+  {{- with .Values.ingress.annotations }}
     {{- toYaml . | nindent 4 }}
   {{- end }}
+    {{- if .Values.basicAuth.enabled }}
+    nginx.ingress.kubernetes.io/auth-secret: {{ include "kuberoapp.fullname" . }}-htpasswd
+    nginx.ingress.kubernetes.io/auth-type: basic
+    nginx.ingress.kubernetes.io/auth-realm: {{ .Values.basicAuth.realm | quote }}
+    {{- end }}
 spec:
   {{- if and .Values.ingress.className (semverCompare ">=1.18-0" .Capabilities.KubeVersion.GitVersion) }}
   ingressClassName: {{ .Values.ingress.className }}

helm-charts/kuberoapp/templates/secret-basic-auth.yaml

@@ -0,0 +1,14 @@
+{{- if gt (len .Values.basicAuth.accounts) 0 }}
+{{- $accounts := .Values.basicAuth.accounts }}
+{{- $val := "" }}
+{{- range $account := $accounts }}
+{{- $val = printf "%s%s\n" $val $account.hash }}
+{{- end }}
+apiVersion: v1
+kind: Secret
+metadata:
+  name: {{ include "kuberoapp.fullname" . }}-htpasswd
+type: Opaque
+data:
+  auth: {{ $val | trimSuffix "\n" | b64enc }}
+{{- end }}

helm-charts/kuberoapp/values.yaml

@@ -158,6 +158,17 @@ resources: {}
   #   cpu: 100m
   #   memory: 128Mi
 
+basicAuth:
+  enabled: false
+  realm: "Protected"
+  accounts: []
+    #- user: foo
+    #  pass: bar
+    #  hash: ""
+    #- user: bar
+    #  pass: foo
+    #  hash: ""
+
 autoscaling:
   enabled: false