rohit/probo
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat: update charts README.md and values to remove sensitive values

Browse Source 
Signed-off-by: Thomas Stocker <thomas.stocker.pro@gmail.com>
This commit is contained in:
Thomas Stocker
2025-11-12 16:26:27 +01:00
committed by Bryan Frimin
parent 9adc975369
commit eb461d5c29
2 changed files with 17 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

17
contrib/helm/charts/probo/README.md
View File

@@ -8,6 +8,7 @@ This Helm chart deploys Probo - an open-source SOC-2 compliance platform - on Ku
- Helm 3.8+ - Helm 3.8+
- External PostgreSQL database (AWS RDS, GCP Cloud SQL, Azure Database, etc.) - External PostgreSQL database (AWS RDS, GCP Cloud SQL, Azure Database, etc.)
- S3 or S3-compatible object storage (AWS S3, GCS, DigitalOcean Spaces, MinIO, etc.) - S3 or S3-compatible object storage (AWS S3, GCS, DigitalOcean Spaces, MinIO, etc.)
- OpenSSL installed (for generating secrets)
## Installing the Chart ## Installing the Chart
@@ -20,6 +21,20 @@ export COOKIE_SECRET=$(openssl rand -base64 32)
export PASSWORD_PEPPER=$(openssl rand -base64 32) export PASSWORD_PEPPER=$(openssl rand -base64 32)
export TRUST_TOKEN_SECRET=$(openssl rand -base64 32) export TRUST_TOKEN_SECRET=$(openssl rand -base64 32)
# Generate private key and certificate valid for 10 years
TEMP_KEY=$(mktemp)
TEMP_CERT=$(mktemp)
openssl req -x509 -newkey rsa:2048 -keyout "$TEMP_KEY" -out "$TEMP_CERT" \
-days 3650 -nodes -subj "/CN=probo-saml/O=Probo/C=US" 2>/dev/null
# Read generated files and export as environment variables
export SAML_PRIVATE_KEY=$(cat "$TEMP_KEY")
export SAML_CERTIFICATE=$(cat "$TEMP_CERT")
# Clean up temporary files
rm -f "$TEMP_KEY" "$TEMP_CERT"
echo "Save these secrets securely!" echo "Save these secrets securely!"
``` ```
@@ -32,6 +47,8 @@ helm install probo . \
--set probo.auth.cookieSecret="$COOKIE_SECRET" \ --set probo.auth.cookieSecret="$COOKIE_SECRET" \
--set probo.auth.passwordPepper="$PASSWORD_PEPPER" \ --set probo.auth.passwordPepper="$PASSWORD_PEPPER" \
--set probo.trustAuth.tokenSecret="$TRUST_TOKEN_SECRET" \ --set probo.trustAuth.tokenSecret="$TRUST_TOKEN_SECRET" \
--set probo.saml.privateKey="$SAML_PRIVATE_KEY" \
--set probo.saml.certificate="$SAML_CERTIFICATE" \
--set postgresql.host="postgres.example.com" \ --set postgresql.host="postgres.example.com" \
--set postgresql.password="<db-password>" \ --set postgresql.password="<db-password>" \
--set s3.bucket="probo-production" \ --set s3.bucket="probo-production" \

4
contrib/helm/charts/probo/values.yaml
View File

@@ -216,10 +216,6 @@ probo:
sessionDuration: 604800 sessionDuration: 604800
# Cleanup interval in seconds for expired SAML sessions (0 = disabled) # Cleanup interval in seconds for expired SAML sessions (0 = disabled)
cleanupIntervalSeconds: 0 cleanupIntervalSeconds: 0
# SAML service provider certificate in PEM format
certificate: ""
# SAML service provider private key in PEM format
privateKey: ""
# Trust center authentication # Trust center authentication
trustAuth: trustAuth: