feat(authelia): 4.31.0 (#102)

authelia · Oct 3, 2021 · bd82e41 · bd82e41
1 parent 06cf77f
commit bd82e41
Show file tree

Hide file tree

Showing 4 changed files with 56 additions and 4 deletions.
diff --git a/charts/authelia/Chart.yaml b/charts/authelia/Chart.yaml
@@ -1,6 +1,6 @@
 apiVersion: v2
 name: authelia
-version: 0.5.8
+version: 0.6.0
 kubeVersion: ">= 1.13.0-0"
 description: Authelia is a Single Sign-On Multi-Factor portal for web apps
 type: application
@@ -23,6 +23,6 @@ maintainers:
     email: [email protected]
     url: https://github.com/james-d-elliott
 icon: https://avatars2.githubusercontent.com/u/59122411?s=200&v=4
-appVersion: 4.30.5
+appVersion: 4.31.0
 deprecated: false
 annotations: {}
diff --git a/charts/authelia/templates/configMap.yaml b/charts/authelia/templates/configMap.yaml
@@ -37,6 +37,12 @@ data:
       issuer: {{ default .Values.domain .Values.configMap.totp.issuer }}
       period: {{ default 30 .Values.configMap.totp.period }}
       skew: {{ default 1 .Values.configMap.totp.skew }}
+    ntp:
+      address: {{ default "time.cloudflare.com:123" .Values.configMap.ntp.address }}
+      version: {{ default 3 .Values.configMap.ntp.version }}
+      max_desync: {{ default "3s" .Values.configMap.ntp.max_desync }}
+      disable_startup_check: {{ default false .Values.configMap.ntp.disable_startup_check }}
+      disable_failure: {{ default false .Values.configMap.ntp.disable_failure }}
     {{- if include "authelia.configured.duo" . }}
     duo_api:
       hostname: {{ .Values.configMap.duo_api.hostname }}

diff --git a/charts/authelia/values.local.yaml b/charts/authelia/values.local.yaml
@@ -19,7 +19,7 @@ image:
   # registry: docker.io
   registry: ghcr.io
   repository: authelia/authelia
-  tag: 4.30.5
+  tag: 4.31.0
   pullPolicy: IfNotPresent
   pullSecrets: []
   # pullSecrets:
@@ -457,6 +457,29 @@ configMap:
     ## See: https://www.authelia.com/docs/configuration/one-time-password.html#period-and-skew to read the documentation.
     skew: 1
 
+  ##
+  ## NTP Configuration
+  ##
+  ## This is used to validate the servers time is accurate enough to validate TOTP.
+  ntp:
+    ## NTP server address.
+    address: "time.cloudflare.com:123"
+
+    ## NTP version.
+    version: 4
+
+    ## Maximum allowed time offset between the host and the NTP server.
+    max_desync: 3s
+
+    ## Disables the NTP check on startup entirely. This means Authelia will not contact a remote service at all if you
+    ## set this to true, and can operate in a truly offline mode.
+    disable_startup_check: false
+
+    ## The default of false will prevent startup only if we can contact the NTP server and the time is out of sync with
+    ## the NTP server more than the configured max_desync. If you set this to true, an error will be logged but startup
+    ## will continue regardless of results.
+    disable_failure: false
+
   ##
   ## Duo Push API Configuration
   ##

diff --git a/charts/authelia/values.yaml b/charts/authelia/values.yaml
@@ -18,7 +18,7 @@ image:
   # registry: docker.io
   registry: ghcr.io
   repository: authelia/authelia
-  tag: 4.30.5
+  tag: 4.31.0
   pullPolicy: IfNotPresent
   pullSecrets: []
   # pullSecrets:
@@ -455,6 +455,29 @@ configMap:
     ## See: https://www.authelia.com/docs/configuration/one-time-password.html#period-and-skew to read the documentation.
     skew: 1
 
+  ##
+  ## NTP Configuration
+  ##
+  ## This is used to validate the servers time is accurate enough to validate TOTP.
+  ntp:
+    ## NTP server address.
+    address: "time.cloudflare.com:123"
+
+    ## NTP version.
+    version: 4
+
+    ## Maximum allowed time offset between the host and the NTP server.
+    max_desync: 3s
+
+    ## Disables the NTP check on startup entirely. This means Authelia will not contact a remote service at all if you
+    ## set this to true, and can operate in a truly offline mode.
+    disable_startup_check: false
+
+    ## The default of false will prevent startup only if we can contact the NTP server and the time is out of sync with
+    ## the NTP server more than the configured max_desync. If you set this to true, an error will be logged but startup
+    ## will continue regardless of results.
+    disable_failure: false
+
   ##
   ## Duo Push API Configuration
   ##