unkin/argocd-apps
2
0
Fork 0
Code Issues 2 Pull Requests 2 Actions Packages Projects Releases Wiki Activity

fix(kanidm): replicate 1/2 from 0 only with automatic_refresh #181

Merged
unkinben merged 1 commits from benvin/kanidm_address into main 2026-05-31 00:20:30 +10:00
Conversation 0 Commits 1 Files Changed 1
+10 -4
1 changed files with 10 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
apps/base/kanidm/statefulset.yaml
+10 -4
View File
@@ -44,13 +44,19 @@ spec:
- | - |
set -e set -e
cp "/config-template/server-${POD_NAME##*-}.toml" /config/server.toml cp "/config-template/server-${POD_NAME##*-}.toml" /config/server.toml
for peer in kanidm-0 kanidm-1 kanidm-2; do if [ "${POD_NAME}" = "kanidm-0" ]; then
[ "${peer}" = "${POD_NAME}" ] && continue peers="kanidm-1 kanidm-2"
else
peers="kanidm-0"
fi
for peer in ${peers}; do
cert_file="/repl-certs/${peer}" cert_file="/repl-certs/${peer}"
[ -s "${cert_file}" ] || continue [ -s "${cert_file}" ] || continue
fqdn="${peer}.kanidm-headless.kanidm.svc.cluster.local" fqdn="${peer}.kanidm-headless.kanidm.svc.cluster.local"
printf '\n[replication."repl://%s:8444"]\ntype = "mutual-pull"\npartner_cert = "%s"\n' \ refresh=""
"${fqdn}" "$(cat ${cert_file})" >> /config/server.toml [ "${peer}" = "kanidm-0" ] && refresh="\nautomatic_refresh = true"
printf '\n[replication."repl://%s:8444"]\ntype = "mutual-pull"\npartner_cert = "%s"%s\n' \
"${fqdn}" "$(cat ${cert_file})" "${refresh}" >> /config/server.toml
done done
env: env:
- name: POD_NAME - name: POD_NAME