feat: multi tenant support

deploy/helm/go-guess/Chart.yaml

@@ -2,5 +2,5 @@ apiVersion: v2
 name: go-guess
 description: Go Guess recruitment workspace
 type: application
-version: 0.1.0
-appVersion: "0.1.0"
+version: 0.2.0
+appVersion: "0.2.0"

deploy/helm/go-guess/templates/NOTES.txt

@@ -1,5 +1,9 @@
 Go Guess has been installed in namespace {{ .Release.Namespace }}.
-Protected interviewer routes authorize with Go Loose at {{ .Values.app.goLooseBaseURL }}.
+{{- if .Values.goLoose.enabled }}
+Browser sign-in uses Go Loose at https://<tenant>.{{ .Values.goLoose.authDomain }}.
+{{- else }}
+Browser sign-in uses the application password login. Enable goLoose to redirect tenant hosts.
+{{- end }}
 
 {{- if .Values.ingress.enabled }}
 Open {{ .Values.app.frontendURL }}

deploy/helm/go-guess/templates/postgresql-statefulset.yaml

@@ -44,8 +44,6 @@ spec:
                 secretKeyRef:
                   name: {{ include "go-guess.secretName" . }}
                   key: postgresql-password
-            - name: PGDATA
-              value: /var/lib/postgresql/data/pgdata
           ports:
             - name: postgresql
               containerPort: 5432
@@ -69,7 +67,7 @@ spec:
             {{- toYaml .Values.postgresql.resources | nindent 12 }}
           volumeMounts:
             - name: data
-              mountPath: /var/lib/postgresql/data
+              mountPath: /var/lib/postgresql
       {{- if not .Values.postgresql.persistence.enabled }}
       volumes:
         - name: data

deploy/helm/go-guess/templates/rabbitmq-statefulset.yaml

@@ -21,7 +21,7 @@ spec:
     spec:
       automountServiceAccountToken: false
       securityContext:
-        fsGroup: 100
+        fsGroup: 101
         fsGroupChangePolicy: OnRootMismatch
       containers:
         - name: rabbitmq

deploy/helm/go-guess/values.yaml

@@ -16,6 +16,16 @@ app:
   tokenTTL: 8h
   maxUploadMB: 10
 
+goLoose:
+  enabled: false
+  authDomain: auth.dev
+  appDomain: guess.dev
+  ca:
+    existingSecret: ""
+    key: ca.crt
+    mountPath: /certs/local-ca.crt
+  tenants: []
+
 secrets:
   jwtSecret: ""
   databaseURL: ""