make FLOWER_BASIC_AUTH explicit through settings.flower.basicAuth

open-zaak · Mar 14, 2022 · a4201e6 · a4201e6
1 parent bf7d856
commit a4201e6
Show file tree

Hide file tree

Showing 3 changed files with 3 additions and 0 deletions.
diff --git a/charts/open-notificaties/README.md b/charts/open-notificaties/README.md
@@ -73,6 +73,7 @@ table below describes the supported versions
 | `settings.isHttps` | Used to construct absolute URLs and controls a variety of security settings | `true` |
 | `settings.debug` | Only set this to True on a local development environment. Various other security settings are derived from this setting | `false` |
 | `settings.flower.urlPrefix` | If enabled, deploy Flower on a non-root URL | `""` |
+| `settings.flower.basicAuth` | Secure Flower with [Basic Authentication](https://flower.readthedocs.io/en/latest/config.html#basic-auth). This is a comma-separated list of `username:password`. You should configure this when `flower.ingress.enabled` is set to true. | `""` |
 | `worker.podLabels` | Additional labels to be set on the open-notification worker pods | `{}` |
 | `postgresql.persistence.enabled` | Enable PostgreSQL persistency | `false` |
 | `postgresql.persistence.size` | Configure PostgreSQL size | `"1Gi"` |

diff --git a/charts/open-notificaties/templates/secret.yaml b/charts/open-notificaties/templates/secret.yaml
@@ -20,6 +20,7 @@ data:
  SENTRY_DSN: {{ .Values.settings.sentry.dsn | toString | b64enc | quote }}
  {{- end }}
  {{- if .Values.flower.enabled }}
+ FLOWER_BASIC_AUTH: {{ .Values.settings.flower.basicAuth | toString | b64enc | quote }}
  {{- range $index, $index_value := .Values.flower.extraEnvVarsSecret }}
  {{ $index }}: {{ $index_value | toString | b64enc | quote }}
  {{- end }}

diff --git a/charts/open-notificaties/values.yaml b/charts/open-notificaties/values.yaml
@@ -176,6 +176,7 @@ settings:
 
  flower:
  urlPrefix: ""
+ basicAuth: ""
 
 #######################
 # PostgreSQL subchart #