manifests/values/dex/values/values.yaml

replicaCount: 1

config:
  issuer: https://auth.adm.oceanbox.io
  storage:
    type: postgres
    config:
      host: dex-db-rw
      port: 5432
      database: app
      user: $DEX_DB_USER
      password: $DEX_DB_PASSWORD
      ssl:
        mode: disable
  web:
    http: 0.0.0.0:5556
  frontend:
    # theme: light
    theme: coreos
    issuer: "Oceanbox"
    issuerUrl: "https://oceanbox.io"
  #   logoURL: theme/logo.png
  #   dir: ""
  telemetry:
    http: 0.0.0.0:5558
  oauth2:
    skipApprovalScreen: true
  expiry:
    idTokens: "12h"
    authRequests: "30m"
    refreshTokens:
      validIfNotUsedFor: "168h"
      absoluteLifetime: "720h"

  connectors:
    - type: microsoft
      id: microsoft
      name: Microsoft
      config:
        clientID: "43667ac0-37e1-422f-99fc-50a699bb255c"
        clientSecret: $MICROSOFT_CLIENT_SECRET
        redirectURI: https://auth.adm.oceanbox.io/callback
        scopes:
          - openid
          - email

  staticClients:
    # - id: dex
    #   name: Dex
    #   secret: $CLIENT_SECRET_DEX
    #   redirectURIs:
    #   - https://idp.beta.oceanbox.io/dex/callback
    #   - https://idp.dev.oceanbox.io/dex/callback
    #   - https://idp.oceanbox.io/dex/callback
    #   - https://idp.srv.oceanbox.io/dex/callback
    # - id: atlantis
    # name: Atlantis
    # secret: $CLIENT_SECRET_ATLANTIS
    # redirectURIs:
    # - https://maps.beta.oceanbox.io/signin-oidc
    # - https://codex.adm.oceanbox.io/signin-oidc
    # - https://maps.oceanbox.io/signin-oidc
    # - https://oceanbox.app/signin-oidc
    # - https://atlantis.srv.oceanbox.io/signin-oidc

    - id: atlantis_dev
      name: Atlantis (dev)
      secret: $CLIENT_SECRET_ATLANTIS_DEV
      redirectURIs:
        - https://maps.dev.oceanbox.io/signin-oidc
        - https://atlantis.local.oceanbox.io:8080/signin-oidc
        - https://codex.local.oceanbox.io:8080/signin-oidc
        - https://simkir-maps.dev.oceanbox.io/signin-oidc
        - https://jonas-atlantis.dev.oceanbox.io/signin-oidc
        - https://atlantis.beta.oceanbox.io/signin-oidc
        - https://stig-atlantis.dev.oceanbox.io/signin-oidc
        - https://codex.local.oceanbox.io:10380/signin-oidc
        - https://ole-atlantis.dev.oceanbox.io/signin-oidc
        - https://bast-atlantis.dev.oceanbox.io/signin-oidc
        - https://mrtz-atlantis.dev.oceanbox.io/signin-oidc
        - https://codex.dev.tos.obx/signin-oidc
        - https://simkir-codex.dev.oceanbox.io/signin-oidc
        - https://simkir-atlantis.dev.oceanbox.io/signin-oidc
        - https://codex.dev.oceanbox.io/signin-oidc

    # - id: sorcerer
    # name: Sorcerer
    # secret: $CLIENT_SECRET_SORCERER
    # redirectURIs:
    # - https://sorcerer.vtn.oceanbox.io/signin-oidc
    # - https://sorcerer.beta.ekman.oceanbox.io/signin-oidc
    # - https://sorcerer.ekman.oceanbox.io/signin-oidc
    # - https://sorcerer.data.oceanbox.io/signin-oidc

    - id: sorcerer_dev
      name: Sorcerer (dev)
      secret: $CLIENT_SECRET_SORCERER_DEV
      redirectURIs:
        - https://simkir-sorcerer.ekman.oceanbox.io/signin-oidc
        - https://jonas-sorcerer.ekman.oceanbox.io/signin-oidc
        - https://stig-sorcerer.dev.vtn.obx/signin-oidc
        - https://simkir-sorcerer.dev.vtn.obx/signin-oidc
        - https://ole-sorcerer.ekman.oceanbox.io/signin-oidc
        - https://sorcerer.vtn.oceanbox.io/signin-oidc
        - https://mrtz-sorcerer.dev.vtn.obx/signin-oidc
        - https://sorcerer.ekman.oceanbox.io/signin-oidc
        - https://bast-sorcerer.ekman.oceanbox.io/signin-oidc
        - https://sorcerer.data.oceanbox.io/signin-oidc
        - https://ole-sorcerer.dev.vtn.obx/signin-oidc
        - https://stig-sorcerer.ekman.oceanbox.io/signin-oidc

envVars:
  - name: DEX_DB_USER
    valueFrom:
      secretKeyRef:
        name: dex-db-app
        key: username
  - name: DEX_DB_PASSWORD
    valueFrom:
      secretKeyRef:
        name: dex-db-app
        key: password
  - name: MICROSOFT_CLIENT_SECRET
    valueFrom:
      secretKeyRef:
        name: dex-microsoft
        key: clientSecret
  # - name: CLIENT_SECRET_DEX
  #   valueFrom:
  #     secretKeyRef:
  #       name: dex-clients
  #       key: dex
  # - name: CLIENT_SECRET_ATLANTIS
  #   valueFrom:
  #     secretKeyRef:
  #       name: dex-clients
  #       key: atlantis
  - name: CLIENT_SECRET_ATLANTIS_DEV
    valueFrom:
      secretKeyRef:
        name: dex-clients
        key: atlantis_dev
  # - name: CLIENT_SECRET_SORCERER
  #   valueFrom:
  #     secretKeyRef:
  #       name: dex-clients
  #       key: sorcerer
  - name: CLIENT_SECRET_SORCERER_DEV
    valueFrom:
      secretKeyRef:
        name: dex-clients
        key: sorcerer_dev

ingress:
  enabled: true
  className: nginx
  annotations:
    cert-manager.io/cluster-issuer: letsencrypt-production
    nginx.ingress.kubernetes.io/ssl-redirect: "true"
    nginx.ingress.kubernetes.io/backend-protocol: HTTP
  hosts:
    - host: auth.adm.oceanbox.io
      paths:
        - path: /
          pathType: ImplementationSpecific
  tls:
    - secretName: auth.adm.oceanbox.io-tls
      hosts:
        - auth.adm.oceanbox.io

resources:
  limits:
    cpu: 500m
    memory: 512Mi
  requests:
    cpu: 100m
    memory: 128Mi