values.yaml 1.15 KB
Newer Older
Sandro Mathys's avatar
Sandro Mathys committed
1
2
# Always pull the images here so we can be sure this works.
# Otherwise we might not notice it broke if the image is already present on the worker node.
3
4
5
image:
  pullPolicy: Always

Sandro Mathys's avatar
Sandro Mathys committed
6
7
8
9
10
11
imagePullSecrets:
  - name: maps-shibboleth-sp-helm-chart-registry

route:
  enabled: true

12
13
14
15
deployment:
  automaticPodRollout:
    always: true

Sandro Mathys's avatar
Sandro Mathys committed
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
global:
  domainName: "shibboleth-sp-helm-chart.zh.shift.switchengines.ch"

backend:
  shibboleth:
    applicationDefaults:
      entityID: "https://shibboleth-sp-helm-chart.zh.shift.switchengines.ch/shibboleth"
      homeURL: "/Shibboleth.sso/Session"
      
      sessions:
        handlerSSL: "false"

      errors:
        supportContact: "services-support@switch.ch"

      credentialResolver:
        activeSecretName: "shibboleth-sp-helm-chart-certs"

frontend:
  apache:
Sandro Mathys's avatar
Sandro Mathys committed
36
37
    enableSSL: true

38
39
40
41
    # example SWITCHengines S3 bucket hosting a static website:
    # remoteURL: "https://os.zhdk.cloud.switch.ch/swift/v1/shibboleth-sp-helm-chart-demo-page/"
    # example apache deployment in the same namespace:
    remoteURL: "http://shibboleth-sp-helm-chart-example-webserver"
Sandro Mathys's avatar
Sandro Mathys committed
42
43
44

    accessRules: |
      Require shib-attr homeOrganization switch.ch