prole/knoe-auth-kerberos-configmap.yaml at d6586cf1d938383cfc625a3753dc836fc1fda31f - prole - Gitea: Git with a cup of tea

chrisfu/prole

mirror of https://github.com/dredx/prole.git synced 2026-09-27 07:14:29 +00:00

chrisfu 9fe954d30e feat(auth): KNOE.LOCAL realm; prole-kerberos-ad-dc ExternalName svc; Gitea reverse proxy auth

- knoe-auth-kerberos-configmap.yaml: PROLE.LOCAL → KNOE.LOCAL
- prole-kerberos-ad-dc-svc.yaml: ExternalName Service for PROLE.ORG Samba AD KDC
- kustomization.yaml: register gitea-spnego-proxy + prole-kerberos-ad-dc-svc
- gitea/deploy.sh build_helm_values(): add service.ENABLE_REVERSE_PROXY_AUTHENTICATION,
  ENABLE_REVERSE_PROXY_AUTO_REGISTRATION, REVERSE_PROXY_TRUSTED_PROXIES=10.42.0.0/16

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-05-08 12:13:46 -07:00

9 lines

214 B

YAML

Raw Blame History

 apiVersion: v1
 kind: ConfigMap
 metadata:
   name: knoe-auth-kerberos
 data:
   # Kerberos HTTP service principal for SPNEGO (must match keytab)
   servicePrincipal: "HTTP/api.knoe.org@KNOE.LOCAL"
   realm: "KNOE.LOCAL"