fix: update dex

dex/applicationset.yaml

@@ -20,7 +20,7 @@ spec:
       project: atlantis
       destination:
         server: https://kubernetes.default.svc
-        namespace: atlantis
+        namespace: idp
       source:
       - repoURL: https://charts.dexidp.io
         targetRevision: 0.16.0
@@ -28,7 +28,8 @@ spec:
         helm:
           valueFiles:
             - $values/dex/values.yaml
+            - $values/dex/{{ env }}-values.yaml
       - repoURL: https://gitlab.com/oceanbox/manifests.git
         targetRevision: HEAD
-        path: cerbos/manifests
+        path: dex/manifests
         ref: values

dex/manifests/dex-config.yaml

@@ -2,7 +2,6 @@ apiVersion: v1
 kind: Secret
 metadata:
   name: dex
-  namespace: atlantis
 type: Opaque
 stringData:
   config.yaml: |

dex/manifests/dex-volumes.yaml

@@ -4,7 +4,7 @@ metadata:
   name: pv-oceanbox-dex
 spec:
   accessModes:
-  - ReadWriteOnce
+  - ReadOnlyMany
   capacity:
     storage: 50M
   mountOptions:
@@ -20,10 +20,9 @@ apiVersion: v1
 kind: PersistentVolumeClaim
 metadata:
   name: oceanbox-dex
-  namespace: atlantis
 spec:
   accessModes:
-  - ReadWriteOnce
+  - ReadOnlyMany
   resources:
     requests:
       storage: 50M

dex/prod-values.yaml

@@ -0,0 +1,17 @@
+ingress:
+  enabled: true
+  className: nginx
+  annotations:
+    cert-manager.io/cluster-issuer: letsencrypt-staging
+    nginx.ingress.kubernetes.io/ssl-redirect: "true"
+  hosts:
+    - host: idp.srv.oceanbox.io
+      paths:
+        - path: /
+          pathType: ImplementationSpecific
+  tls:
+   - secretName: prod-dex-tls
+     hosts:
+       - idp.srv.oceanbox.io
+
+

dex/staging-values.yaml

@@ -0,0 +1,17 @@
+ingress:
+  enabled: true
+  className: nginx
+  annotations:
+    cert-manager.io/cluster-issuer: letsencrypt-staging
+    nginx.ingress.kubernetes.io/ssl-redirect: "true"
+  hosts:
+    - host: idp.beta.oceanbox.io
+      paths:
+        - path: /
+          pathType: ImplementationSpecific
+  tls:
+   - secretName: staging-dex-tls
+     hosts:
+       - idp.beta.oceanbox.io
+
+

dex/values.yaml

@@ -33,21 +33,5 @@ service:
       port: 5557
       nodePort:
 
-ingress:
-  enabled: true
-  className: nginx
-  annotations:
-    cert-manager.io/cluster-issuer: letsencrypt-staging
-    nginx.ingress.kubernetes.io/ssl-redirect: "true"
-  hosts:
-    - host: idp.srv.oceanbox.io
-      paths:
-        - path: /
-          pathType: ImplementationSpecific
-  tls:
-   - secretName: dex-tls
-     hosts:
-       - idp.srv.oceanbox.io
-
 serviceMonitor:
   enabled: true