kubernetes/apps/security/pocket-id-operator/instance/pocketidinstance.yaml
1
---
2
apiVersion: pocketid.internal/v1alpha1
3
kind: PocketIDInstance
4
metadata:
5
name: &app pocket-id
6
spec:
7
image: ghcr.io/pocket-id/pocket-id:v2.14.0-distroless@sha256:e0f83a42a78d0759b6d2d8c7380ef0fa8a4c95dfa01ad88740a073ae9cc4ba94
8
timezone: Europe/Warsaw
9
appUrl: "https://id.janpuc.com"
10
databaseUrl:
11
valueFrom:
12
secretKeyRef:
13
name: &secret pocket-id-secret
14
key: DB_CONNECTION_STRING
15
encryptionKey:
16
valueFrom:
17
secretKeyRef:
18
name: *secret
19
key: ENCRYPTION_KEY
20
env:
21
- name: LDAP_USER_SEARCH_FILTER
22
valueFrom:
23
secretKeyRef:
24
name: *secret
25
key: LDAP_USER_SEARCH_FILTER
26
- name: LDAP_GROUPS_SEARCH_FILTER
27
valueFrom:
28
secretKeyRef:
29
name: *secret
30
key: LDAP_GROUPS_SEARCH_FILTER
31
ldap:
32
url: "ldap://lldap.security.svc.cluster.local:3890"
33
base: dc=janpuc,dc=com
34
bindDN: uid=admin,ou=people,dc=janpuc,dc=com
35
bindPassword:
36
valueFrom:
37
secretKeyRef:
38
name: *secret
39
key: LDAP_BIND_PASSWORD
40
skipCertVerify: true
41
adminGroupName: "ID-Admin"
42
attributeMapping:
43
userUniqueIdentifier: "uuid"
44
groupUniqueIdentifier: "uuid"
45
userFirstName: "givenName"
46
userLastName: "sn"
47
userUsername: "uid"
48
userEmail: "mail"
49
userProfilePicture: "jpegPhoto"
50
groupMember: "member"
51
groupName: "cn"
52
smtp:
53
host: "smtp.protonmail.ch"
54
port: 587
55
from: "noreply@janpuc.com"
56
user: "noreply@janpuc.com"
57
password:
58
valueFrom:
59
secretKeyRef:
60
name: *secret
61
key: SMTP_PASSWORD
62
tls: "starttls"
63
geoip:
64
dbPath: "/tmp/GeoLite2-City.mmdb"
65
maxmindLicenseKey:
66
valueFrom:
67
secretKeyRef:
68
name: *secret
69
key: MAXMIND_LICENSE_KEY
70
ui:
71
sessionDuration: 43800
72
userManagement:
73
emailsVerified: true
74
logging:
75
level: "info"
76
metrics:
77
enabled: true
78
analyticsDisabled: true
79
versionCheckDisabled: true
80
route:
81
enabled: true
82
parentRefs:
83
- name: envoy-external
84
namespace: network
85
hostnames:
86
- id.janpuc.com
87
persistence:
88
enabled: true
89
existingClaim: *app
90
resources:
91
requests:
92
cpu: 10m
93
memory: 48Mi
94
limits:
95
memory: 96Mi