fix that in Helm config jwtOnly=false will enabled pre-authenticati…

…on in Ditto * was not done by default before, so would have to be activated by default Signed-off-by: Thomas Jäckle <thomas.jaeckle@beyonnex.io>
eclipse-ditto · Jul 19, 2023 · 4070aad · 4070aad
1 parent 022dffe
commit 4070aad
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/deployment/helm/ditto/templates/gateway-deployment.yaml b/deployment/helm/ditto/templates/gateway-deployment.yaml
@@ -154,7 +154,7 @@ spec:
               value: "{{ .Values.global.prometheus.port }}"
             {{- end }}
             - name: ENABLE_PRE_AUTHENTICATION
-              value: "{{ .Values.gateway.config.authentication.enablePreAuthentication }}"
+              value: "{{ or .Values.gateway.config.authentication.enablePreAuthentication (not .Values.global.jwtOnly) }}"
             - name: DEVOPS_SECURED
               value: "{{ .Values.gateway.config.authentication.devops.secured }}"
             - name: DEVOPS_AUTHENTICATION_METHOD

diff --git a/deployment/helm/ditto/templates/swaggerui-deployment.yaml b/deployment/helm/ditto/templates/swaggerui-deployment.yaml
@@ -59,7 +59,7 @@ spec:
                echo "removing Google auth from ditto-api-2.yml"
                sed --in-place "/- Google:/,+1d" /usr/share/nginx/html/openapi/ditto-api-2.yml
                sed --in-place "/    Google:/,+9d" /usr/share/nginx/html/openapi/ditto-api-2.yml
-               {{- if not .Values.gateway.config.authentication.enablePreAuthentication }}
+               {{- if or (not .Values.gateway.config.authentication.enablePreAuthentication) .Values.global.jwtOnly }}
                echo "removing NginxBasic auth from ditto-api-2.yml"
                sed --in-place "/- NginxBasic: \[]/d" /usr/share/nginx/html/openapi/ditto-api-2.yml
                sed --in-place "/    NginxBasic:/,+3d" /usr/share/nginx/html/openapi/ditto-api-2.yml