values.yaml 1.41 KB
Newer Older
Sandro Mathys's avatar
Sandro Mathys committed
1
2
# Always pull the images here so we can be sure this works.
# Otherwise we might not notice it broke if the image is already present on the worker node.
3
4
5
image:
  pullPolicy: Always

Sandro Mathys's avatar
Sandro Mathys committed
6
imagePullSecrets:
Sandro Mathys's avatar
Sandro Mathys committed
7
8
  # personal(!) access token with read AND write privileges to the registry in order to use the dependency proxy
  - name: shibboleth-sp-dependency-proxy
Sandro Mathys's avatar
Sandro Mathys committed
9
10
11
12

route:
  enabled: true

13
14
15
16
deployment:
  automaticPodRollout:
    always: true

Sandro Mathys's avatar
Sandro Mathys committed
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
global:
  domainName: "shibboleth-sp-helm-chart.zh.shift.switchengines.ch"

backend:
  shibboleth:
    applicationDefaults:
      entityID: "https://shibboleth-sp-helm-chart.zh.shift.switchengines.ch/shibboleth"
      homeURL: "/Shibboleth.sso/Session"
      
      sessions:
        handlerSSL: "false"

      errors:
        supportContact: "services-support@switch.ch"

      credentialResolver:
        activeSecretName: "shibboleth-sp-helm-chart-certs"

frontend:
  apache:
Sandro Mathys's avatar
Sandro Mathys committed
37
38
    enableSSL: true

39
40
41
42
    # example SWITCHengines S3 bucket hosting a static website:
    # remoteURL: "https://os.zhdk.cloud.switch.ch/swift/v1/shibboleth-sp-helm-chart-demo-page/"
    # example apache deployment in the same namespace:
    remoteURL: "http://shibboleth-sp-helm-chart-example-webserver"
Sandro Mathys's avatar
Sandro Mathys committed
43
44
45

    accessRules: |
      Require shib-attr homeOrganization switch.ch
Sandro Mathys's avatar
Sandro Mathys committed
46
47
48
49
50
51
52

tests:
  enabled: true

  image:
    repository: "gitlab.switch.ch/helm-charts/shibboleth-sp/dependency_proxy/containers/curlimages/curl"
    tag: "latest"