gitops/homelab-v
1
0
Fork 0
mirror of https://github.com/outbackdingo/homelab-v.git synced 2026-08-25 14:53:19 +00:00
Code Issues Packages Projects Releases Wiki Activity

feat(netbird): change oidc provider to authelia

Browse Source 
This makes it possible to decommission keycloak and crossplane
This commit is contained in:
Vegard Hagen
2025-01-09 19:26:27 +01:00
parent fee02d4b16
commit c483d0fa5a
8 changed files with 77 additions and 60 deletions
Download Patch File Download Diff File Expand all files Collapse all files
k8s/infra/vpn/netbird/management/kustomization.yaml
+20 -18
View File
@@ -10,27 +10,29 @@ configMapGenerator:
- name: management-auth-config
namespace: netbird
literals:
- NETBIRD_AUTH_OIDC_CONFIGURATION_ENDPOINT="https://keycloak.stonegarden.dev/realms/homelab/.well-known/openid-configuration"
- NETBIRD_AUTH_DEVICE_AUTH_PROVIDER="hosted"
- NETBIRD_AUTH_DEVICE_AUTH_AUDIENCE="netbird"
- NETBIRD_AUTH_DEVICE_AUTH_AUTHORITY="https://keycloak.stonegarden.dev/realms/homelab"
- NETBIRD_AUTH_DEVICE_AUTH_CLIENT_ID="netbird"
- NETBIRD_AUTH_DEVICE_AUTH_DEVICE_AUTHORIZATION_ENDPOINT="https://keycloak.stonegarden.dev/realms/homelab/protocol/openid-connect/auth"
- NETBIRD_AUTH_DEVICE_AUTH_TOKEN_ENDPOINT="https://keycloak.stonegarden.dev/realms/homelab/protocol/openid-connect/token"
- NETBIRD_AUTH_DEVICE_AUTH_SCOPE="openid"
- NETBIRD_AUTH_DEVICE_AUTH_USE_ID_TOKEN="false"
- NETBIRD_AUTH_AUDIENCE="netbird"
- NETBIRD_AUTH_CLIENT_ID="netbird"
- NETBIRD_AUTH_PKCE_REDIRECT_URLS='[ "http://localhost:53000" ]'
- NETBIRD_AUTH_SUPPORTED_SCOPES="openid profile email offline_access netbird-api"
- AUTH_AUTHORITY="https://authelia.stonegarden.dev"
# - AUTH_OIDC_CONFIGURATION_ENDPOINT="https://authelia.stonegarden.dev/.well-known/openid-configuration"
# - AUTH_DEVICE_AUTH_AUTHORITY="https://authelia.stonegarden.dev"
# - AUTH_DEVICE_AUTH_PROVIDER="hosted"
# - AUTH_DEVICE_AUTH_CLIENT_ID="netbird"
# - AUTH_DEVICE_AUTH_AUDIENCE="netbird"
# - AUTH_DEVICE_AUTH_DEVICE_AUTHORIZATION_ENDPOINT="https://authelia.stonegarden.dev/protocol/openid-connect/auth"
# - AUTH_DEVICE_AUTH_TOKEN_ENDPOINT="https://authelia.stonegarden.dev/protocol/openid-connect/token"
# - AUTH_DEVICE_AUTH_SCOPE="openid"
# - AUTH_DEVICE_AUTH_USE_ID_TOKEN="false"
- AUTH_CLIENT_ID="netbird"
- AUTH_AUDIENCE="netbird"
# - AUTH_PKCE_REDIRECT_URLS='[ "http://localhost:53000" ]'
# - AUTH_PKCE_USE_ID_TOKEN=true
- AUTH_SUPPORTED_SCOPES="openid profile email offline_access netbird-api"
- name: management-connection-config
namespace: netbird
literals:
- NETBIRD_RELAY_URI="rels://netbird.stonegarden.dev:443"
- NETBIRD_SIGNAL_URI="netbird.stonegarden.dev:443"
- NETBIRD_SIGNAL_PROTOCOL="https"
- NETBIRD_STUN_URI="stun:coturn.stonegarden.dev:5349"
- NETBIRD_TURN_URI="turn:coturn.stonegarden.dev:5349"
- RELAY_URI="rels://netbird.stonegarden.dev:443"
- SIGNAL_URI="netbird.stonegarden.dev:443"
- SIGNAL_PROTOCOL="https"
- STUN_URI="stun:coturn.stonegarden.dev:5349"
- TURN_URI="turn:coturn.stonegarden.dev:5349"
- name: management-runtime-config
namespace: netbird
literals: