From 5dc0f3b91b3f72ecc6cfd7a827cb57438105be01 Mon Sep 17 00:00:00 2001 From: Jens Langhammer Date: Wed, 3 Nov 2021 00:07:39 +0100 Subject: [PATCH] website: remove static service account, use helm chart instead Signed-off-by: Jens Langhammer --- Makefile | 1 - authentik/stages/invitation/stage.py | 1 - website/static/service-account.yaml | 112 --------------------------- 3 files changed, 114 deletions(-) delete mode 100644 website/static/service-account.yaml diff --git a/Makefile b/Makefile index 189b69301..331d73d59 100644 --- a/Makefile +++ b/Makefile @@ -30,7 +30,6 @@ lint-fix: website/developer-docs lint: - pyright authentik tests lifecycle bandit -r authentik tests lifecycle -x node_modules pylint authentik tests lifecycle diff --git a/authentik/stages/invitation/stage.py b/authentik/stages/invitation/stage.py index d8d24315b..cea3f0054 100644 --- a/authentik/stages/invitation/stage.py +++ b/authentik/stages/invitation/stage.py @@ -4,7 +4,6 @@ from typing import Optional from deepmerge import always_merger from django.http import HttpRequest, HttpResponse from django.http.response import HttpResponseBadRequest -from django.shortcuts import get_object_or_404 from structlog.stdlib import get_logger from authentik.flows.models import in_memory_stage diff --git a/website/static/service-account.yaml b/website/static/service-account.yaml deleted file mode 100644 index a9c52377c..000000000 --- a/website/static/service-account.yaml +++ /dev/null @@ -1,112 +0,0 @@ ---- -apiVersion: v1 -kind: ServiceAccount -metadata: - name: authentik - namespace: ##NAMESPACE## ---- -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - name: authentik - namespace: ##NAMESPACE## -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: authentik -subjects: - - kind: ServiceAccount - name: authentik - namespace: ##NAMESPACE## ---- -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - name: authentik - namespace: ##NAMESPACE## -rules: - - apiGroups: - - "" - resources: - - secrets - - services - - configmaps - verbs: - - get - - create - - delete - - list - - patch - - apiGroups: - - extensions - - apps - resources: - - deployments - verbs: - - get - - create - - delete - - list - - patch - - apiGroups: - - extensions - - networking.k8s.io - resources: - - ingresses - verbs: - - get - - create - - delete - - list - - patch - - apiGroups: - - traefik.containo.us - resources: - - middlewares - verbs: - - get - - create - - delete - - list - - patch - - apiGroups: - - monitoring.coreos.com - resources: - - servicemonitors - verbs: - - get - - create - - delete - - list - - patch - - apiGroups: - - apiextensions.k8s.io - resources: - - customresourcedefinitions - verbs: - - list ---- -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - name: authentik -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: authentik -subjects: - - kind: ServiceAccount - name: authentik - namespace: ##NAMESPACE## ---- -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - name: authentik -rules: - - apiGroups: - - apiextensions.k8s.io - resources: - - customresourcedefinitions - verbs: - - list