https://github.com/braghettos/krateo-authn-chart
Krateo authn blueprint — values.schema.json + CompositionDefinition over krateoplatformops/authn-chart.
https://github.com/braghettos/krateo-authn-chart
authentication compositiondefinition helm-chart krateo kubernetes oci-artifact platformops
Last synced: 21 days ago
JSON representation
Krateo authn blueprint — values.schema.json + CompositionDefinition over krateoplatformops/authn-chart.
- Host: GitHub
- URL: https://github.com/braghettos/krateo-authn-chart
- Owner: braghettos
- License: apache-2.0
- Created: 2026-06-05T12:24:59.000Z (about 1 month ago)
- Default Branch: main
- Last Pushed: 2026-06-13T07:39:17.000Z (23 days ago)
- Last Synced: 2026-06-13T09:23:05.177Z (23 days ago)
- Topics: authentication, compositiondefinition, helm-chart, krateo, kubernetes, oci-artifact, platformops
- Language: Go Template
- Size: 53.7 KB
- Stars: 0
- Watchers: 0
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# krateo-authn-chart
Krateo PlatformOps **AuthN** blueprint — a fork of
[`krateoplatformops/authn`](https://github.com/krateoplatformops/authn) packaged as a Krateo
blueprint: the upstream Helm chart plus a `values.schema.json` (so `core-provider` can generate
a typed CRD) and a `CompositionDefinition`.
Part of the [krateo-installer](https://github.com/braghettos/krateo-installer) ecosystem.
## What it ships
| Path | Chart | OCI artifact | Versioning |
|------|-------|--------------|-----------|
| `chart/` | `authn` (appVersion 0.22.2) | `oci://ghcr.io/braghettos/krateo/authn` | tracks the git tag |
| `crd-chart/` | `authn-crd` | `oci://ghcr.io/braghettos/krateo/authn-crd` | pinned `0.22.2` (independent of the app tag) |
The authn CRDs (users/ldap/oauth/oidc) version independently of the authn app, so
`crd-chart/Chart.yaml` carries a literal `version: 0.22.2` rather than the `CHART_VERSION`
placeholder — the release workflow leaves it untouched.
## How the installer consumes it
The installer umbrella emits a `CompositionDefinition` that points `core-provider` at the OCI
chart; `core-provider` generates `Authn.composition.krateo.io` and reconciles one Composition
per instance:
```yaml
apiVersion: core.krateo.io/v1alpha1
kind: CompositionDefinition
metadata:
name: authn
namespace: krateo-system
spec:
chart:
url: oci://ghcr.io/braghettos/krateo/authn
version: "0.22.2"
```
## Requirements
A Secret named `jwt-sign-key` must exist in the namespace where `authn` is deployed, holding the
JWT signing key:
```yaml
apiVersion: v1
kind: Secret
metadata:
name: jwt-sign-key
type: Opaque
stringData:
JWT_SIGN_KEY: change-me
```
## Local validation
```sh
helm lint chart
helm template smoke chart
```
## Release
Push a semver tag (`X.Y.Z`) — CI packages `chart/` and `crd-chart/` and publishes both to
`oci://ghcr.io/braghettos/krateo`.
## Links
- Installer umbrella: https://github.com/braghettos/krateo-installer
- Upstream: https://github.com/krateoplatformops/authn