Add basic authentication support to the Ingress configuration and cr…

…eate a secret for the basic authentication credentials in Kuberoapp.

helm-charts/kuberoapp/templates/ingress.yaml

@@ -21,6 +21,11 @@ metadata:
   {{- with .Values.ingress.annotations }}
   annotations:
     {{- toYaml . | nindent 4 }}
+    {{- if gt (len .Values.basicAuth.accounts) 0 }}
+    nginx.ingress.kubernetes.io/auth-secret: {{ include "kuberoapp.fullname" . }}-htpasswd
+    nginx.ingress.kubernetes.io/auth-type: basic
+    nginx.ingress.kubernetes.io/auth-realm: {{ .Values.basicAuth.realm | quote }}
+    {{- end }}
   {{- end }}
 spec:
   {{- if and .Values.ingress.className (semverCompare ">=1.18-0" .Capabilities.KubeVersion.GitVersion) }}

helm-charts/kuberoapp/templates/secret-basic-auth.yaml

@@ -0,0 +1,15 @@
+{{- if gt (len .Values.basicAuth.accounts) 0 }}
+{{- $accounts := .Values.basicAuth.accounts }}
+{{- $val := "" }}
+{{- range $account := $accounts }}
+{{- $hash := htpasswd $account.user $account.password }}
+{{- $val = printf "%s%s\n" $val $hash }}
+{{- end }}
+apiVersion: v1
+kind: Secret
+metadata:
+  name: {{ include "kuberoapp.fullname" . }}-htpasswd
+type: Opaque
+data:
+  auth: {{ $val | trimSuffix "\n" | b64enc }}
+{{- end }}

helm-charts/kuberoapp/values.yaml

@@ -158,6 +158,14 @@ resources: {}
   #   cpu: 100m
   #   memory: 128Mi
 
+basicAuth:
+  realm: "Protected"
+  accounts: []
+    #- user: foo
+    #  password: bar
+    #- user: bar
+    #  password: foo
+
 autoscaling:
   enabled: false