Chris CoutinhoandClaude Opus 4.6
0b8afec494
Add Login Flow v2 as a fourth auth mode alongside basic, multi-user-basic, and oauth. This enables multi-user deployments using Nextcloud's native Login Flow v2 without requiring OAuth patches to user_oidc. - Add loginFlow section to values.yaml with token encryption config - Add login-flow env vars, args, volume mounts to deployment.yaml - Add login-flow secret and oauth-storage PVC templates - Add loginFlowSecretName helper, update dataStorageEnabled - Add multi-user-basic and login-flow sections to NOTES.txt - Add version footer and ArtifactHub changelog annotations - Update README with 4 auth modes and docker-compose profiles Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
65 lines
2.3 KiB
YAML
65 lines
2.3 KiB
YAML
{{- if and (eq .Values.auth.mode "oauth") .Values.auth.oauth.persistence.enabled (not .Values.auth.oauth.persistence.existingClaim) }}
|
|
apiVersion: v1
|
|
kind: PersistentVolumeClaim
|
|
metadata:
|
|
name: {{ include "nextcloud-mcp-server.fullname" . }}-oauth-storage
|
|
labels:
|
|
{{- include "nextcloud-mcp-server.labels" . | nindent 4 }}
|
|
spec:
|
|
accessModes:
|
|
- {{ .Values.auth.oauth.persistence.accessMode }}
|
|
{{- if .Values.auth.oauth.persistence.storageClass }}
|
|
storageClassName: {{ .Values.auth.oauth.persistence.storageClass }}
|
|
{{- end }}
|
|
resources:
|
|
requests:
|
|
storage: {{ .Values.auth.oauth.persistence.size }}
|
|
{{- end }}
|
|
---
|
|
{{- if eq .Values.auth.mode "login-flow" }}
|
|
apiVersion: v1
|
|
kind: PersistentVolumeClaim
|
|
metadata:
|
|
name: {{ include "nextcloud-mcp-server.fullname" . }}-oauth-storage
|
|
labels:
|
|
{{- include "nextcloud-mcp-server.labels" . | nindent 4 }}
|
|
spec:
|
|
accessModes:
|
|
- ReadWriteOnce
|
|
resources:
|
|
requests:
|
|
storage: 100Mi
|
|
{{- end }}
|
|
---
|
|
{{- if and (eq (include "nextcloud-mcp-server.dataStorageEnabled" .) "true") (not .Values.dataStorage.existingClaim) }}
|
|
{{- $legacyMultiUserBasic := eq (include "nextcloud-mcp-server.legacyMultiUserBasicPersistence" .) "true" }}
|
|
{{- $legacyQdrant := eq (include "nextcloud-mcp-server.legacyQdrantPersistence" .) "true" }}
|
|
{{- $accessMode := .Values.dataStorage.accessMode }}
|
|
{{- $storageClass := .Values.dataStorage.storageClass }}
|
|
{{- $size := .Values.dataStorage.size }}
|
|
{{- if $legacyMultiUserBasic }}
|
|
{{- $accessMode = .Values.auth.multiUserBasic.persistence.accessMode }}
|
|
{{- $storageClass = .Values.auth.multiUserBasic.persistence.storageClass }}
|
|
{{- $size = .Values.auth.multiUserBasic.persistence.size }}
|
|
{{- else if $legacyQdrant }}
|
|
{{- $accessMode = .Values.qdrant.localPersistence.accessMode }}
|
|
{{- $storageClass = .Values.qdrant.localPersistence.storageClass }}
|
|
{{- $size = .Values.qdrant.localPersistence.size }}
|
|
{{- end }}
|
|
apiVersion: v1
|
|
kind: PersistentVolumeClaim
|
|
metadata:
|
|
name: {{ include "nextcloud-mcp-server.fullname" . }}-data-storage
|
|
labels:
|
|
{{- include "nextcloud-mcp-server.labels" . | nindent 4 }}
|
|
spec:
|
|
accessModes:
|
|
- {{ $accessMode }}
|
|
{{- if $storageClass }}
|
|
storageClassName: {{ $storageClass }}
|
|
{{- end }}
|
|
resources:
|
|
requests:
|
|
storage: {{ $size }}
|
|
{{- end }}
|