graphql: Configure authentication parameters for staging and production

Depends on swh/infra/ci-cd/swh-charts!30

Related to swh/infra/sysadm-environment#4785

swh/templates/graphql/configmap.yaml

@@ -20,4 +20,13 @@ data:
 
     max_query_cost:
       anonymous: {{ .Values.graphql.maxQueryCost}}
+
+    {{ if .Values.graphql.auth -}}
+    auth:
+      server: {{ .Values.graphql.auth.server | default "" }}
+      realm: {{ .Values.graphql.auth.realm | default "" }}
+      client: {{ .Values.graphql.auth.client | default "swh-web" }}
+      cache:
+        url: {{ .Values.graphql.auth.cacheUrl | default "memory://" }}
+    {{- end }}
 {{ end }}

swh/values.yaml

@@ -34,7 +34,13 @@ graphql:
 #    search:
 #      host: http://my-search
 #      port: 5010
-
+  auth:
+    # More information in https://gitlab.softwareheritage.org/swh/devel/swh-auth/-/blob/master/README.rst
+    # server: https://auth.backend.url/
+    #realm: MyAuthDomain
+    client: swh-web
+    # memory:// or memcached://memcached:port
+    cacheUrl: memory://
 
 # Allow to specify a specific configuration for pod's /tmp
 # directory. Mostly used to configure the loaders to work

swh/values/production.yaml

@@ -19,6 +19,11 @@ graphql:
     threads: 4
     workers: 2
     timeout: 3600
+  auth:
+    server: https://auth.softwareheritage.org/auth/
+    realm: SoftwareHeritage
+    client: swh-web
+    cacheUrl: memcached://memcached:11211
 
 loaders:
   enabled: true

swh/values/staging.yaml

@@ -433,6 +433,11 @@ graphql:
     httpPath: /
     host: graphql.internal.staging.swh.network
   logLevel: DEBUG
+  auth:
+    server: https://auth.softwareheritage.org/auth/
+    realm: SoftwareHeritageStaging
+    client: swh-web
+    cacheUrl: memcached://memcached:11211
 
 memcached:
   enabled: true