mirror of
https://github.com/samply/bridgehead.git
synced 2026-03-31 21:30:15 +02:00
Enhanced the ovis-setup.sh script to include a comprehensive log message when the OVIS module is enabled. This update provides clear visual feedback during the initialization process, indicating that OVIS services will start with local oauth2-proxy middleware.
37 lines
1.7 KiB
Bash
37 lines
1.7 KiB
Bash
#!/bin/bash -e
|
|
|
|
if [ -n "$ENABLE_OVIS" ]; then
|
|
log INFO ""
|
|
log INFO "######################################################################"
|
|
log INFO "# ___ __ _______ ____ __ __ ___ ____ _ _ _ _____ #"
|
|
log INFO "# / _ \\ \ / /_ _/ ___| | \\/ |/ _ \\| _ \\| | | | | | ____|#"
|
|
log INFO "# | | | |\\ \\ / / | |\\___ \\ | |\\/| | | | | | | | | | | | _| #"
|
|
log INFO "# | |_| | \\ V / | | ___) | | | | | |_| | |_| | |_| | |___| |___ #"
|
|
log INFO "# \\___/ \\_/ |___|____/ |_| |_|\\___/|____/ \\___/|_____|_____|#"
|
|
log INFO "# #"
|
|
log INFO "# OVIS MODULE ENABLED - INITIALIZING AUTH + ROUTING #"
|
|
log INFO "######################################################################"
|
|
log INFO ""
|
|
log INFO "OVIS setup detected -- will start OVIS services with local oauth2-proxy middleware."
|
|
TRUSTED_CA_DIR="/etc/bridgehead/trusted-ca-certs"
|
|
OVIS_OAUTH2_PROXY_PROVIDER_CA_FILES=""
|
|
|
|
if [ -d "$TRUSTED_CA_DIR" ]; then
|
|
shopt -s nullglob
|
|
ca_cert_candidates=("$TRUSTED_CA_DIR"/*.crt)
|
|
shopt -u nullglob
|
|
|
|
if [ ${#ca_cert_candidates[@]} -gt 0 ]; then
|
|
OVIS_OAUTH2_PROXY_PROVIDER_CA_FILES="$(IFS=,; printf '%s' "${ca_cert_candidates[*]}")"
|
|
log INFO "OVIS oauth2-proxy will trust OIDC provider CA files from $TRUSTED_CA_DIR (*.crt)."
|
|
else
|
|
log INFO "No *.crt files found in $TRUSTED_CA_DIR; oauth2-proxy will use system trust store only."
|
|
fi
|
|
else
|
|
log INFO "Trusted CA directory $TRUSTED_CA_DIR is missing; oauth2-proxy will use system trust store only."
|
|
fi
|
|
|
|
OVERRIDE+=" -f ./$PROJECT/modules/ovis-compose.yml"
|
|
add_private_oidc_redirect_url "/oauth2-ovis/callback"
|
|
fi
|