mirrors/versitygw
1
0
Fork 0
mirror of https://github.com/versity/versitygw.git synced 2026-08-29 12:16:56 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #2296 from versity/sis/iam-helm

Browse Source 
feat: add Helm chart support for the standalone IAM service
This commit is contained in:
Ben McClelland
2026-08-26 15:14:35 -07:00
committed by GitHub
parent 1cf4361150 7b6b816df9
commit 12c8d52e22
12 changed files with 967 additions and 24 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.github/workflows/helm-lint.yml
+20
View File
@@ -15,3 +15,23 @@ jobs:
- name: Lint chart
run: helm lint chart/ --strict --set auth.accessKey=dummy --set auth.secretKey=dummy
- name: Lint standalone IAM configurations
run: |
scenarios=(
# existingSecret-based mTLS for both sides, plus NetworkPolicy
"--set iam.enabled=true --set iam.type=standalone --set iam.standalone.certificate.existingSecret=iam-client-tls --set iamServer.enabled=true --set iamServer.private.certificate.existingSecret=iam-server-tls --set networkPolicy.enabled=true"
# cert-manager-issued mTLS, plus TLS on the public control-plane API
"--set iam.enabled=true --set iam.type=standalone --set iam.standalone.certificate.create=true --set iam.standalone.certificate.issuerRef.name=internal-ca --set iamServer.enabled=true --set iamServer.private.certificate.create=true --set iamServer.private.certificate.issuerRef.name=internal-ca --set iamServer.tls.enabled=true --set iamServer.tls.secretName=iam-public-tls"
# Vault storage with multiple iamServer replicas
"--set iamServer.enabled=true --set iamServer.replicaCount=2 --set iamServer.storage.type=vault --set iamServer.storage.vault.endpointUrl=https://vault.example.test --set iamServer.storage.vault.existingSecret=vault-auth --set iamServer.storage.vault.tlsExistingSecret=vault-tls --set iamServer.private.certificate.existingSecret=iam-server-tls"
# externally managed standalone IAM service (no in-chart iamServer)
"--set iam.enabled=true --set iam.type=standalone --set iam.standalone.endpoint=iam.example.test:7443 --set iam.standalone.certificate.existingSecret=iam-client-tls"
)
for scenario in "${scenarios[@]}"; do
echo "::group::helm lint --set ${scenario}"
# shellcheck disable=SC2086
helm lint chart/ --strict --set auth.existingSecret=root-credentials ${scenario}
echo "::endgroup::"
done