17 lines
1.6 KiB
Smarty
17 lines
1.6 KiB
Smarty
{{- define "teleport-cluster.auth.config.gcp" -}}
|
|
{{ include "teleport-cluster.auth.config.common" . }}
|
|
storage:
|
|
type: firestore
|
|
project_id: {{ required "gcp.projectId is required in chart values" .Values.gcp.projectId }}
|
|
collection_name: {{ required "gcp.backendTable is required in chart values" .Values.gcp.backendTable }}
|
|
{{- if .Values.gcp.credentialSecretName }}
|
|
credentials_path: /etc/teleport-secrets/gcp-credentials.json
|
|
{{- end }}
|
|
{{- if .Values.gcp.auditLogMirrorOnStdout }}
|
|
audit_events_uri: ['firestore://{{ required "gcp.auditLogTable is required in chart values" .Values.gcp.auditLogTable }}?projectID={{ required "gcp.projectId is required in chart values" .Values.gcp.projectId }}{{ empty .Values.gcp.credentialSecretName | ternary "" "&credentialsPath=/etc/teleport-secrets/gcp-credentials.json"}}', 'stdout://']
|
|
{{- else }}
|
|
audit_events_uri: ['firestore://{{ required "gcp.auditLogTable is required in chart values" .Values.gcp.auditLogTable }}?projectID={{ required "gcp.projectId is required in chart values" .Values.gcp.projectId }}{{ empty .Values.gcp.credentialSecretName | ternary "" "&credentialsPath=/etc/teleport-secrets/gcp-credentials.json"}}']
|
|
{{- end }}
|
|
audit_sessions_uri: "gs://{{ required "gcp.sessionRecordingBucket is required in chart values" .Values.gcp.sessionRecordingBucket }}?projectID={{ required "gcp.projectId is required in chart values" .Values.gcp.projectId }}{{ empty .Values.gcp.credentialSecretName | ternary "" "&credentialsPath=/etc/teleport-secrets/gcp-credentials.json"}}"
|
|
{{- end -}}
|