This commit is contained in:
2024-02-06 13:50:15 +01:00
parent eb066bf770
commit ac5ac11571
9 changed files with 153 additions and 152 deletions

View File

@@ -4,10 +4,10 @@ kind: Deployment
metadata: metadata:
name: authentik-server name: authentik-server
labels: labels:
helm.sh/chart: authentik-2023.10.6 helm.sh/chart: authentik-2023.10.7
app.kubernetes.io/name: authentik app.kubernetes.io/name: authentik
app.kubernetes.io/instance: authentik app.kubernetes.io/instance: authentik
app.kubernetes.io/version: "2023.10.6" app.kubernetes.io/version: "2023.10.7"
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/component: "server" app.kubernetes.io/component: "server"
spec: spec:
@@ -24,16 +24,16 @@ spec:
app.kubernetes.io/name: authentik app.kubernetes.io/name: authentik
app.kubernetes.io/instance: authentik app.kubernetes.io/instance: authentik
app.kubernetes.io/component: "server" app.kubernetes.io/component: "server"
app.kubernetes.io/version: "2023.10.6" app.kubernetes.io/version: "2023.10.7"
annotations: annotations:
goauthentik.io/config-checksum: 1beef732e07ae88db4d75233936272af195329398ffec096097feae528030fb0 goauthentik.io/config-checksum: 92e0692364c90a8b3c4cb0bf6b95463d3dd5910bb3b3a830679ef1e94856a1c1
spec: spec:
enableServiceLinks: true enableServiceLinks: true
securityContext: securityContext:
{} {}
containers: containers:
- name: authentik - name: authentik
image: "ghcr.io/goauthentik/server:2023.10.6" image: "ghcr.io/goauthentik/server:2023.10.7"
imagePullPolicy: "IfNotPresent" imagePullPolicy: "IfNotPresent"
args: ["server"] args: ["server"]
env: env:

View File

@@ -4,10 +4,10 @@ kind: Deployment
metadata: metadata:
name: authentik-worker name: authentik-worker
labels: labels:
helm.sh/chart: authentik-2023.10.6 helm.sh/chart: authentik-2023.10.7
app.kubernetes.io/name: authentik app.kubernetes.io/name: authentik
app.kubernetes.io/instance: authentik app.kubernetes.io/instance: authentik
app.kubernetes.io/version: "2023.10.6" app.kubernetes.io/version: "2023.10.7"
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/component: "worker" app.kubernetes.io/component: "worker"
spec: spec:
@@ -24,9 +24,9 @@ spec:
app.kubernetes.io/name: authentik app.kubernetes.io/name: authentik
app.kubernetes.io/instance: authentik app.kubernetes.io/instance: authentik
app.kubernetes.io/component: "worker" app.kubernetes.io/component: "worker"
app.kubernetes.io/version: "2023.10.6" app.kubernetes.io/version: "2023.10.7"
annotations: annotations:
goauthentik.io/config-checksum: 1beef732e07ae88db4d75233936272af195329398ffec096097feae528030fb0 goauthentik.io/config-checksum: 92e0692364c90a8b3c4cb0bf6b95463d3dd5910bb3b3a830679ef1e94856a1c1
spec: spec:
serviceAccountName: authentik serviceAccountName: authentik
enableServiceLinks: true enableServiceLinks: true
@@ -34,7 +34,7 @@ spec:
{} {}
containers: containers:
- name: authentik - name: authentik
image: "ghcr.io/goauthentik/server:2023.10.6" image: "ghcr.io/goauthentik/server:2023.10.7"
imagePullPolicy: "IfNotPresent" imagePullPolicy: "IfNotPresent"
args: ["worker"] args: ["worker"]
env: env:

View File

@@ -4,10 +4,10 @@ kind: HorizontalPodAutoscaler
metadata: metadata:
name: authentik-server name: authentik-server
labels: labels:
helm.sh/chart: authentik-2023.10.6 helm.sh/chart: authentik-2023.10.7
app.kubernetes.io/name: authentik app.kubernetes.io/name: authentik
app.kubernetes.io/instance: authentik app.kubernetes.io/instance: authentik
app.kubernetes.io/version: "2023.10.6" app.kubernetes.io/version: "2023.10.7"
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/component: "server" app.kubernetes.io/component: "server"
spec: spec:

View File

@@ -4,10 +4,10 @@ kind: HorizontalPodAutoscaler
metadata: metadata:
name: authentik-worker name: authentik-worker
labels: labels:
helm.sh/chart: authentik-2023.10.6 helm.sh/chart: authentik-2023.10.7
app.kubernetes.io/name: authentik app.kubernetes.io/name: authentik
app.kubernetes.io/instance: authentik app.kubernetes.io/instance: authentik
app.kubernetes.io/version: "2023.10.6" app.kubernetes.io/version: "2023.10.7"
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
app.kubernetes.io/component: "worker" app.kubernetes.io/component: "worker"
spec: spec:

View File

@@ -6,20 +6,15 @@ metadata:
name: authentik name: authentik
description: authentik is an open-source Identity Provider focused on flexibility and versatility description: authentik is an open-source Identity Provider focused on flexibility and versatility
options: options:
domain_name: sub_domain:
default: your_company.com default: auth
examples: examples:
- your_company.com - auth
type: string type: string
issuer: geoip:
default: letsencrypt-prod default: /geoip/GeoLite2-City.mmdb
examples: examples:
- letsencrypt-prod - /geoip/GeoLite2-City.mmdb
type: string
loglevel:
default: info
examples:
- info
type: string type: string
admin: admin:
default: default:
@@ -31,6 +26,132 @@ options:
default: auth-admin default: auth-admin
type: string type: string
type: object type: object
loglevel:
default: info
examples:
- info
type: string
error_reporting:
default:
enabled: false
environment: k8s
send_pii: false
examples:
- enabled: false
environment: k8s
send_pii: false
properties:
enabled:
default: false
type: boolean
environment:
default: k8s
type: string
send_pii:
default: false
type: boolean
type: object
email:
default:
port: 587
timeout: 30
use_ssl: false
use_tls: false
examples:
- port: 587
timeout: 30
use_ssl: false
use_tls: false
properties:
port:
default: 587
type: integer
timeout:
default: 30
type: integer
use_ssl:
default: false
type: boolean
use_tls:
default: false
type: boolean
type: object
redis:
default:
exporter:
enabled: true
examples:
- exporter:
enabled: true
properties:
exporter:
default:
enabled: true
properties:
enabled:
default: true
type: boolean
type: object
type: object
storage:
default:
postgres:
size: 8Gi
redis:
size: 8Gi
examples:
- postgres:
size: 8Gi
redis:
size: 8Gi
properties:
postgres:
default:
size: 8Gi
properties:
size:
default: 8Gi
type: string
type: object
redis:
default:
size: 8Gi
properties:
size:
default: 8Gi
type: string
type: object
type: object
issuer:
default: letsencrypt-prod
examples:
- letsencrypt-prod
type: string
ingress_class:
default: traefik
examples:
- traefik
type: string
domain:
default: your-company
examples:
- your-company
type: string
postgres:
default:
replicas: 1
examples:
- replicas: 1
properties:
replicas:
default: 1
type: integer
type: object
domain_name:
default: your_company.com
examples:
- your_company.com
type: string
images: images:
default: default:
app: app:
@@ -168,95 +289,6 @@ options:
type: string type: string
type: object type: object
type: object type: object
postgres:
default:
replicas: 1
examples:
- replicas: 1
properties:
replicas:
default: 1
type: integer
type: object
domain:
default: your-company
examples:
- your-company
type: string
storage:
default:
postgres:
size: 8Gi
redis:
size: 8Gi
examples:
- postgres:
size: 8Gi
redis:
size: 8Gi
properties:
postgres:
default:
size: 8Gi
properties:
size:
default: 8Gi
type: string
type: object
redis:
default:
size: 8Gi
properties:
size:
default: 8Gi
type: string
type: object
type: object
email:
default:
port: 587
timeout: 30
use_ssl: false
use_tls: false
examples:
- port: 587
timeout: 30
use_ssl: false
use_tls: false
properties:
port:
default: 587
type: integer
timeout:
default: 30
type: integer
use_ssl:
default: false
type: boolean
use_tls:
default: false
type: boolean
type: object
error_reporting:
default:
enabled: false
environment: k8s
send_pii: false
examples:
- enabled: false
environment: k8s
send_pii: false
properties:
enabled:
default: false
type: boolean
environment:
default: k8s
type: string
send_pii:
default: false
type: boolean
type: object
backups: backups:
default: default:
enable: false enable: false
@@ -316,38 +348,6 @@ options:
default: false default: false
type: boolean type: boolean
type: object type: object
ingress_class:
default: traefik
examples:
- traefik
type: string
redis:
default:
exporter:
enabled: true
examples:
- exporter:
enabled: true
properties:
exporter:
default:
enabled: true
properties:
enabled:
default: true
type: boolean
type: object
type: object
sub_domain:
default: auth
examples:
- auth
type: string
geoip:
default: /geoip/GeoLite2-City.mmdb
examples:
- /geoip/GeoLite2-City.mmdb
type: string
dependencies: dependencies:
- dist: null - dist: null
category: core category: core

View File

@@ -4,10 +4,10 @@ kind: PrometheusRule
metadata: metadata:
name: authentik name: authentik
labels: labels:
helm.sh/chart: authentik-2023.10.6 helm.sh/chart: authentik-2023.10.7
app.kubernetes.io/name: authentik app.kubernetes.io/name: authentik
app.kubernetes.io/instance: authentik app.kubernetes.io/instance: authentik
app.kubernetes.io/version: "2023.10.6" app.kubernetes.io/version: "2023.10.7"
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
spec: spec:
groups: groups:

View File

@@ -4,10 +4,10 @@ kind: ServiceMonitor
metadata: metadata:
name: authentik name: authentik
labels: labels:
helm.sh/chart: authentik-2023.10.6 helm.sh/chart: authentik-2023.10.7
app.kubernetes.io/name: authentik app.kubernetes.io/name: authentik
app.kubernetes.io/instance: authentik app.kubernetes.io/instance: authentik
app.kubernetes.io/version: "2023.10.6" app.kubernetes.io/version: "2023.10.7"
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
spec: spec:
endpoints: endpoints:

View File

@@ -60,6 +60,7 @@ module "ingress" {
dns_names = local.dns_names dns_names = local.dns_names
middlewares = [kubectl_manifest.gitlab_userinfo.name,kubectl_manifest.gitlab_authorize.name,kubectl_manifest.gitlab_token.name] middlewares = [kubectl_manifest.gitlab_userinfo.name,kubectl_manifest.gitlab_authorize.name,kubectl_manifest.gitlab_token.name]
services = [local.service] services = [local.service]
create_redirect = false
providers = { providers = {
kubectl = kubectl kubectl = kubectl
} }

View File

@@ -4,10 +4,10 @@ kind: Service
metadata: metadata:
name: authentik name: authentik
labels: labels:
helm.sh/chart: authentik-2023.10.6 helm.sh/chart: authentik-2023.10.7
app.kubernetes.io/name: authentik app.kubernetes.io/name: authentik
app.kubernetes.io/instance: authentik app.kubernetes.io/instance: authentik
app.kubernetes.io/version: "2023.10.6" app.kubernetes.io/version: "2023.10.7"
app.kubernetes.io/managed-by: Helm app.kubernetes.io/managed-by: Helm
spec: spec:
type: ClusterIP type: ClusterIP