38 lines
1.1 KiB
HCL
38 lines
1.1 KiB
HCL
data "authentik_group" "akadmin" {
|
|
name = "authentik Admins"
|
|
}
|
|
resource "authentik_group" "groups" {
|
|
name = "mail-users"
|
|
}
|
|
data "authentik_group" "readed_groups" {
|
|
depends_on = [ authentik_group.groups ]
|
|
name = "mail-users"
|
|
}
|
|
|
|
resource "authentik_application" "prj_app" {
|
|
name = "${var.instance}"
|
|
slug = "${var.component}-${var.instance}"
|
|
#protocol_provider = authentik_provider_oauth2.oauth2.id
|
|
backchannel_providers = [authentik_provider_scim.scim.id]
|
|
meta_launch_url = format("https://%s.%s", var.sub-domain, var.domain-name)
|
|
meta_icon = format("https://%s.%s/%s", var.sub-domain, var.domain-name, "favicon-32x32.png")
|
|
}
|
|
|
|
resource "authentik_policy_binding" "prj_access_users" {
|
|
target = authentik_application.prj_app.uuid
|
|
group = authentik_group.groups.id
|
|
order = 0
|
|
}
|
|
resource "authentik_policy_binding" "prj_access_vynil" {
|
|
target = authentik_application.prj_app.uuid
|
|
group = data.authentik_group.akadmin.id
|
|
order = 1
|
|
}
|
|
|
|
data "kubernetes_secret_v1" "authentik" {
|
|
metadata {
|
|
name = "authentik"
|
|
namespace = "${var.domain}-auth"
|
|
}
|
|
}
|