flux-infra/apps/lldap/bootstrap/bootstrap-job.yaml

102 lines
2.7 KiB
YAML

apiVersion: batch/v1
kind: Job
metadata:
name: lldap-bootstrap
annotations:
kustomize.toolkit.fluxcd.io/force: enabled
spec:
template:
spec:
restartPolicy: OnFailure
containers:
- name: lldap-bootstrap
image: lldap/lldap:v0.5.0
command:
- /bootstrap/bootstrap.sh
env:
- name: LLDAP_URL
value: "http://lldap:17170"
- name: LLDAP_ADMIN_USERNAME
value: admin
- name: LLDAP_ADMIN_PASSWORD
valueFrom:
secretKeyRef:
name: lldap-credentials
key: lldap-ldap-user-pass
- name: DO_CLEANUP
value: "true"
volumeMounts:
- name: bootstrap
mountPath: /bootstrap/bootstrap.sh
readOnly: true
subPath: bootstrap.sh
- name: user-configs
mountPath: /bootstrap/user-configs
readOnly: true
- name: group-configs
mountPath: /bootstrap/group-configs
readOnly: true
- name: system-users
mountPath: /bootstrap/system-users
readOnly: true
volumes:
- name: bootstrap
configMap:
name: bootstrap
defaultMode: 0555
items:
- key: bootstrap.sh
path: bootstrap.sh
- name: user-configs
projected:
sources:
- secret:
name: lldap-bootstrap-configs
items:
- key: user-configs.json
path: user-configs.json
- secret:
name: authelia-lldap
items:
- key: user-configs.json
path: authelia-configs.json
- secret:
name: grafana-lldap
items:
- key: user-configs.json
path: grafana-configs.json
- name: system-users
projected:
sources:
- secret:
name: authelia-lldap
items:
- key: password
path: authelia
- secret:
name: grafana-lldap
items:
- key: password
path: grafana
- name: group-configs
projected:
sources:
- secret:
name: lldap-bootstrap-configs
items:
- key: group-configs.json
path: group-configs.json