Skip to content

Commit

Permalink
feat: support authservice with redis, switch to pepr helm chart (#658)
Browse files Browse the repository at this point in the history
## Description
* Updates Pepr to 0.34.0
* Uses Pepr Helm Chart
* Adds support to configure redis as authservice memory store

## Related Issue

Fixes #518

## Type of change

- [ ] Bug fix (non-breaking change which fixes an issue)
- [ ] New feature (non-breaking change which adds functionality)
- [ ] Other (security config, docs update, etc)

## Checklist before merging

- [ ] Test, docs, adr added or updated as needed
- [ ] [Contributor
Guide](https://github.com/defenseunicorns/uds-template-capability/blob/main/CONTRIBUTING.md)
followed

---------

Co-authored-by: Micah Nagel <micah.nagel@defenseunicorns.com>
  • Loading branch information
rjferguson21 and mjnagel authored Aug 19, 2024
1 parent 5a34ce8 commit e2fe58a
Show file tree
Hide file tree
Showing 19 changed files with 550 additions and 329 deletions.
1 change: 1 addition & 0 deletions .yamllint
Original file line number Diff line number Diff line change
Expand Up @@ -9,6 +9,7 @@ ignore:
- '**/chart/templates**'
- 'node_modules/**'
- 'dist/**'
- 'src/pepr/uds-operator-config/templates**'

rules:
anchors: enable
Expand Down
11 changes: 11 additions & 0 deletions docs/configuration/uds-operator.md
Original file line number Diff line number Diff line change
Expand Up @@ -152,6 +152,17 @@ The UDS Operator uses the first `redirectUris` to populate the `match.prefix` ho

For a complete example, see [app-authservice-tenant.yaml](https://github.com/defenseunicorns/uds-core/blob/main/src/test/app-authservice-tenant.yaml)

#### External Session Store
If you wish to scale Authservice horiztonally, Authservice supports using an [external redis session store](https://docs.tetrate.io/istio-authservice/configuration/oidc#session-store-configuration) which can be configured by setting [UDS_AUTHSERVICE_REDIS_URI](https://github.com/defenseunicorns/uds-core/blob/main/src/pepr/zarf.yaml#L20-L22).

You can also specify the `AUTHSERVICE_REDIS_URI` variable in your `uds-config.yaml`:

```yaml
variables:
core:
AUTHSERVICE_REDIS_URI: redis://redis.redis.svc.cluster.local:6379
```

#### Trusted Certificate Authority

Authservice can be configured with additional trusted certificate bundle in cases where UDS Core ingress gateways are deployed with private PKI.
Expand Down
Loading

0 comments on commit e2fe58a

Please sign in to comment.