node-red add authentication

README.md

@@ -71,17 +71,7 @@ Deployments and scripts on services/Zigbee2mqtt repo folder.
 
 ## node-red
 
-**Deploy app:**
-
-```bash
-./services/node-red/ops-scripts/apply-app.sh
-```
-
-**Deploy Infra:**
-
-```bash
-./services/node-red/ops-scripts/apply-infra.sh
-```
+check [readme](./services/node-red/README.md) for more information on setup and configuration.
 
 ## core-dns
 

services/node-red/README.md

@@ -0,0 +1,20 @@
+# node-red
+
+**Deploy app:**
+
+```bash
+./services/node-red/ops-scripts/apply-app.sh
+```
+
+**Deploy Infra:**
+
+```bash
+./services/node-red/ops-scripts/apply-infra.sh
+```
+
+Create password to add to node-red settings file.
+
+``` bash
+#npm install bcryptjs
+node -e "console.log(require('bcryptjs').hashSync(process.argv[1], 8));" YOUR-PASSWORD
+```

services/node-red/deploy/app/.gitignore

@@ -0,0 +1 @@
+node-red-settings.js

services/node-red/deploy/app/deployment.yaml

@@ -22,6 +22,9 @@ spec:
         volumeMounts:
         - name: node-red-data
           mountPath: /data
+        - name: node-red-settings 
+          mountPath: /data/settings.js 
+          subPath: settings.js
         resources:
           requests:
             memory: "128Mi"
@@ -33,3 +36,6 @@ spec:
       - name: node-red-data
         persistentVolumeClaim:
           claimName: node-red
+      - name: node-red-settings 
+        secret: 
+          secretName: node-red-settings

services/node-red/deploy/app/kustomization.yaml

@@ -6,3 +6,7 @@ resources:
   - service.yaml
 generatorOptions:
   disableNameSuffixHash: true
+secretGenerator:
+- name: node-red-settings 
+  files: 
+    - settings.js=./node-red-settings.js

services/node-red/deploy/app/node-red-settings.example.js

@@ -0,0 +1,10 @@
+module.exports = {
+    adminAuth: {
+        type: "credentials",
+        users: [{
+            username: "?????",
+            password: "??????",
+            permissions: "*"
+        }]
+    }
+}