mirror of
https://github.com/dredx/prole.git
synced 2026-09-24 19:14:33 +00:00
46f31843c2
- Resolve namespace drift in Kerberos test flow and OpenBao deployment. - Fix OpenAPI credential-validation failures in etc scripts by using --validate=false with kubectl. - Introduce preferred_service_namespace() to accurately target namespaces for KDC policy/test paths. - Default Kerberos test user to 'administrator' and prefill from Ansible vault secrets. - Generalized OpenBao deployment logic to correctly handle multi-namespace environments. - Added regression test 'tests/etc/test_init_kerberos_k3s_real_kdc.sh'. - Synchronized SERVICE_NAMESPACE extraction in prole_cfg.sh. Co-authored-by: Junie <junie@jetbrains.com>
33 lines
554 B
YAML
33 lines
554 B
YAML
apiVersion: apps/v1
|
|
kind: Deployment
|
|
metadata:
|
|
name: openbao
|
|
spec:
|
|
replicas: 1
|
|
selector:
|
|
matchLabels:
|
|
app: openbao
|
|
template:
|
|
metadata:
|
|
labels:
|
|
app: openbao
|
|
spec:
|
|
containers:
|
|
- name: openbao
|
|
image: ghcr.io/openbao/openbao:latest
|
|
args: ["server","-dev","-dev-listen-address=0.0.0.0:8200"]
|
|
ports:
|
|
- containerPort: 8200
|
|
---
|
|
apiVersion: v1
|
|
kind: Service
|
|
metadata:
|
|
name: openbao
|
|
spec:
|
|
selector:
|
|
app: openbao
|
|
ports:
|
|
- name: http
|
|
port: 8200
|
|
targetPort: 8200
|