Parameters
Global parameters
| Name | Description | Value |
|---|
global.imageCredentials.registry | Docker image registry hosting Corsha Artifacts | "corsha-docker.jfrog.io" |
global.imageCredentials.username | Docker image username for registry hosting Corsha Artifacts | "" |
global.imageCredentials.password | Docker image password for registry hosting Corsha Artifacts | "" |
Corsha Primer parameters
| Name | Description | Value |
|---|
image.repository | corsha-authenticator image repository | corsha-docker.jfrog.io/mstream-primer |
image.tag | corsha-authenticator image tag (immutable tags are recommended) | v1.6.1 |
image.pullPolicy | corsha-authenticator image pull policy | IfNotPresent |
Corsha Primer deployment parameters
| Name | Description | Value |
|---|
resources.limits | The resources limits for the Corsha Primer container | {"cpu":"300m","memory":"128Mi"} |
resources.requests | The requested resources for the Corsha Primer container | {"cpu":"300m","memory":"128Mi"} |
trustedCAs | Map of Name -> PEM encoded CA cert for all CAs to be trusted by the primer | {} |
Corsha Primer application parameters
| Name | Description | Value |
|---|
primerSecret | A JWT generated by the Console used to deploy one or more machines | "" |
env.PRIMER_SERVICE_HOST | The hostname of the Corsha Authentication Server's Primer Service | "" |
env.PRIMER_SERVICE_PORT | The port of the Corsha Authentication Server's Primer Service. Must be a string. | "443" |
Corsha Primer machines list
A Primer may generate Authenticator Secrets for more than one Corsha-enabled machine by adding to the machines list. This is a yaml-formatted list of machine objects, whose structure is described below.
Most importantly, the machine's secretName must correspond with the Kubernetes Secret name that is later read by the Corsha Authenticator.
| Machine Attribute | Description | Value |
|---|
machineId | A string that uniquely identifies a deployed client application that has a Corsha Authenticator sidecar | "" |
jobId | The name of the CICD job which is deploying this machine | "" |
buildId | The build ID in the CICD system which is deploying this machine, such as Jenkins build number. Must be a string. | "" |
secretsName | A string that uniquely identifies a Kubernetes Secret object in which the Authenticator Secret will be stored. | "" |