379 lines
7.8 KiB
YAML
379 lines
7.8 KiB
YAML
---
|
|
apiVersion: vinyl.solidite.fr/v1beta1
|
|
kind: Component
|
|
category: share
|
|
metadata:
|
|
name: authentik
|
|
description: authentik is an open-source Identity Provider focused on flexibility and versatility
|
|
options:
|
|
redis:
|
|
default:
|
|
exporter:
|
|
enabled: true
|
|
examples:
|
|
- exporter:
|
|
enabled: true
|
|
properties:
|
|
exporter:
|
|
default:
|
|
enabled: true
|
|
properties:
|
|
enabled:
|
|
default: true
|
|
type: boolean
|
|
type: object
|
|
type: object
|
|
postgres:
|
|
default:
|
|
replicas: 1
|
|
examples:
|
|
- replicas: 1
|
|
properties:
|
|
replicas:
|
|
default: 1
|
|
type: integer
|
|
type: object
|
|
admin:
|
|
default:
|
|
email: auth-admin
|
|
examples:
|
|
- email: auth-admin
|
|
properties:
|
|
email:
|
|
default: auth-admin
|
|
type: string
|
|
type: object
|
|
domain:
|
|
default: your-company
|
|
examples:
|
|
- your-company
|
|
type: string
|
|
geoip:
|
|
default: /geoip/GeoLite2-City.mmdb
|
|
examples:
|
|
- /geoip/GeoLite2-City.mmdb
|
|
type: string
|
|
email:
|
|
default:
|
|
port: 587
|
|
timeout: 30
|
|
use_ssl: false
|
|
use_tls: false
|
|
examples:
|
|
- port: 587
|
|
timeout: 30
|
|
use_ssl: false
|
|
use_tls: false
|
|
properties:
|
|
port:
|
|
default: 587
|
|
type: integer
|
|
timeout:
|
|
default: 30
|
|
type: integer
|
|
use_ssl:
|
|
default: false
|
|
type: boolean
|
|
use_tls:
|
|
default: false
|
|
type: boolean
|
|
type: object
|
|
loglevel:
|
|
default: info
|
|
examples:
|
|
- info
|
|
type: string
|
|
sub-domain:
|
|
default: auth
|
|
examples:
|
|
- auth
|
|
type: string
|
|
domain_name:
|
|
default: your_company.com
|
|
examples:
|
|
- your_company.com
|
|
type: string
|
|
issuer:
|
|
default: letsencrypt-prod
|
|
examples:
|
|
- letsencrypt-prod
|
|
type: string
|
|
error_reporting:
|
|
default:
|
|
enabled: false
|
|
environment: k8s
|
|
send_pii: false
|
|
examples:
|
|
- enabled: false
|
|
environment: k8s
|
|
send_pii: false
|
|
properties:
|
|
enabled:
|
|
default: false
|
|
type: boolean
|
|
environment:
|
|
default: k8s
|
|
type: string
|
|
send_pii:
|
|
default: false
|
|
type: boolean
|
|
type: object
|
|
ingress_class:
|
|
default: traefik
|
|
examples:
|
|
- traefik
|
|
type: string
|
|
backups:
|
|
default:
|
|
enable: false
|
|
endpoint: ''
|
|
key-id-key: s3-id
|
|
retention:
|
|
db: 30d
|
|
schedule:
|
|
db: 0 3 * * *
|
|
secret-key: s3-secret
|
|
secret-name: backup-settings
|
|
use-barman: false
|
|
examples:
|
|
- enable: false
|
|
endpoint: ''
|
|
key-id-key: s3-id
|
|
retention:
|
|
db: 30d
|
|
schedule:
|
|
db: 0 3 * * *
|
|
secret-key: s3-secret
|
|
secret-name: backup-settings
|
|
use-barman: false
|
|
properties:
|
|
enable:
|
|
default: false
|
|
type: boolean
|
|
endpoint:
|
|
default: ''
|
|
type: string
|
|
key-id-key:
|
|
default: s3-id
|
|
type: string
|
|
retention:
|
|
default:
|
|
db: 30d
|
|
properties:
|
|
db:
|
|
default: 30d
|
|
type: string
|
|
type: object
|
|
schedule:
|
|
default:
|
|
db: 0 3 * * *
|
|
properties:
|
|
db:
|
|
default: 0 3 * * *
|
|
type: string
|
|
type: object
|
|
secret-key:
|
|
default: s3-secret
|
|
type: string
|
|
secret-name:
|
|
default: backup-settings
|
|
type: string
|
|
use-barman:
|
|
default: false
|
|
type: boolean
|
|
type: object
|
|
storage:
|
|
default:
|
|
postgres:
|
|
size: 8Gi
|
|
redis:
|
|
size: 8Gi
|
|
examples:
|
|
- postgres:
|
|
size: 8Gi
|
|
redis:
|
|
size: 8Gi
|
|
properties:
|
|
postgres:
|
|
default:
|
|
size: 8Gi
|
|
properties:
|
|
size:
|
|
default: 8Gi
|
|
type: string
|
|
type: object
|
|
redis:
|
|
default:
|
|
size: 8Gi
|
|
properties:
|
|
size:
|
|
default: 8Gi
|
|
type: string
|
|
type: object
|
|
type: object
|
|
images:
|
|
default:
|
|
app:
|
|
project: goauthentik
|
|
pullPolicy: IfNotPresent
|
|
registry: ghcr.io
|
|
repository: goauthentik/server
|
|
tag: 2023.8.3
|
|
postgresql:
|
|
registry: ghcr.io
|
|
repository: cloudnative-pg/postgresql
|
|
tag: 15.3
|
|
redis:
|
|
pullPolicy: IfNotPresent
|
|
registry: quay.io
|
|
repository: opstree/redis
|
|
tag: v7.0.12
|
|
redis_exporter:
|
|
pullPolicy: IfNotPresent
|
|
registry: quay.io
|
|
repository: opstree/redis-exporter
|
|
tag: v1.44.0
|
|
examples:
|
|
- app:
|
|
project: goauthentik
|
|
pullPolicy: IfNotPresent
|
|
registry: ghcr.io
|
|
repository: goauthentik/server
|
|
tag: 2023.8.3
|
|
postgresql:
|
|
registry: ghcr.io
|
|
repository: cloudnative-pg/postgresql
|
|
tag: 15.3
|
|
redis:
|
|
pullPolicy: IfNotPresent
|
|
registry: quay.io
|
|
repository: opstree/redis
|
|
tag: v7.0.12
|
|
redis_exporter:
|
|
pullPolicy: IfNotPresent
|
|
registry: quay.io
|
|
repository: opstree/redis-exporter
|
|
tag: v1.44.0
|
|
properties:
|
|
app:
|
|
default:
|
|
project: goauthentik
|
|
pullPolicy: IfNotPresent
|
|
registry: ghcr.io
|
|
repository: goauthentik/server
|
|
tag: 2023.8.3
|
|
properties:
|
|
project:
|
|
default: goauthentik
|
|
type: string
|
|
pullPolicy:
|
|
default: IfNotPresent
|
|
enum:
|
|
- Always
|
|
- Never
|
|
- IfNotPresent
|
|
type: string
|
|
registry:
|
|
default: ghcr.io
|
|
type: string
|
|
repository:
|
|
default: goauthentik/server
|
|
type: string
|
|
tag:
|
|
default: 2023.8.3
|
|
type: string
|
|
type: object
|
|
postgresql:
|
|
default:
|
|
registry: ghcr.io
|
|
repository: cloudnative-pg/postgresql
|
|
tag: 15.3
|
|
properties:
|
|
registry:
|
|
default: ghcr.io
|
|
type: string
|
|
repository:
|
|
default: cloudnative-pg/postgresql
|
|
type: string
|
|
tag:
|
|
default: 15.3
|
|
type: number
|
|
type: object
|
|
redis:
|
|
default:
|
|
pullPolicy: IfNotPresent
|
|
registry: quay.io
|
|
repository: opstree/redis
|
|
tag: v7.0.12
|
|
properties:
|
|
pullPolicy:
|
|
default: IfNotPresent
|
|
enum:
|
|
- Always
|
|
- Never
|
|
- IfNotPresent
|
|
type: string
|
|
registry:
|
|
default: quay.io
|
|
type: string
|
|
repository:
|
|
default: opstree/redis
|
|
type: string
|
|
tag:
|
|
default: v7.0.12
|
|
type: string
|
|
type: object
|
|
redis_exporter:
|
|
default:
|
|
pullPolicy: IfNotPresent
|
|
registry: quay.io
|
|
repository: opstree/redis-exporter
|
|
tag: v1.44.0
|
|
properties:
|
|
pullPolicy:
|
|
default: IfNotPresent
|
|
enum:
|
|
- Always
|
|
- Never
|
|
- IfNotPresent
|
|
type: string
|
|
registry:
|
|
default: quay.io
|
|
type: string
|
|
repository:
|
|
default: opstree/redis-exporter
|
|
type: string
|
|
tag:
|
|
default: v1.44.0
|
|
type: string
|
|
type: object
|
|
type: object
|
|
dependencies:
|
|
- dist: null
|
|
category: core
|
|
component: cert-manager
|
|
- dist: null
|
|
category: core
|
|
component: secret-generator
|
|
- dist: null
|
|
category: crd
|
|
component: prometheus
|
|
- dist: null
|
|
category: crd
|
|
component: traefik
|
|
- dist: null
|
|
category: dbo
|
|
component: pg
|
|
- dist: null
|
|
category: dbo
|
|
component: redis
|
|
providers:
|
|
kubernetes: null
|
|
authentik: true
|
|
kubectl: true
|
|
postgresql: null
|
|
restapi: null
|
|
http: null
|
|
gitea: null
|
|
tfaddtype: null
|