474 lines
10 KiB
YAML
474 lines
10 KiB
YAML
---
|
|
apiVersion: vinyl.solidite.fr/v1beta1
|
|
kind: Component
|
|
category: share
|
|
metadata:
|
|
name: authentik
|
|
description: authentik is an open-source Identity Provider focused on flexibility and versatility
|
|
options:
|
|
admin:
|
|
default:
|
|
email: auth-admin
|
|
examples:
|
|
- email: auth-admin
|
|
properties:
|
|
email:
|
|
default: auth-admin
|
|
type: string
|
|
type: object
|
|
backups:
|
|
default:
|
|
enable: false
|
|
endpoint: ''
|
|
key_id_key: s3-id
|
|
restic_key: bck-password
|
|
retention:
|
|
db: 30d
|
|
keepDaily: 14
|
|
keepMonthly: 12
|
|
keepWeekly: 6
|
|
keepYearly: 12
|
|
schedule:
|
|
backup: 20 3 * * *
|
|
check: 20 5 * * 1
|
|
db: 0 3 * * *
|
|
prune: 20 1 * * 0
|
|
secret_key: s3-secret
|
|
secret_name: backup-settings
|
|
use_barman: false
|
|
examples:
|
|
- enable: false
|
|
endpoint: ''
|
|
key_id_key: s3-id
|
|
restic_key: bck-password
|
|
retention:
|
|
db: 30d
|
|
keepDaily: 14
|
|
keepMonthly: 12
|
|
keepWeekly: 6
|
|
keepYearly: 12
|
|
schedule:
|
|
backup: 20 3 * * *
|
|
check: 20 5 * * 1
|
|
db: 0 3 * * *
|
|
prune: 20 1 * * 0
|
|
secret_key: s3-secret
|
|
secret_name: backup-settings
|
|
use_barman: false
|
|
properties:
|
|
enable:
|
|
default: false
|
|
type: boolean
|
|
endpoint:
|
|
default: ''
|
|
type: string
|
|
key_id_key:
|
|
default: s3-id
|
|
type: string
|
|
restic_key:
|
|
default: bck-password
|
|
type: string
|
|
retention:
|
|
default:
|
|
db: 30d
|
|
keepDaily: 14
|
|
keepMonthly: 12
|
|
keepWeekly: 6
|
|
keepYearly: 12
|
|
properties:
|
|
db:
|
|
default: 30d
|
|
type: string
|
|
keepDaily:
|
|
default: 14
|
|
type: integer
|
|
keepMonthly:
|
|
default: 12
|
|
type: integer
|
|
keepWeekly:
|
|
default: 6
|
|
type: integer
|
|
keepYearly:
|
|
default: 12
|
|
type: integer
|
|
type: object
|
|
schedule:
|
|
default:
|
|
backup: 20 3 * * *
|
|
check: 20 5 * * 1
|
|
db: 0 3 * * *
|
|
prune: 20 1 * * 0
|
|
properties:
|
|
backup:
|
|
default: 20 3 * * *
|
|
type: string
|
|
check:
|
|
default: 20 5 * * 1
|
|
type: string
|
|
db:
|
|
default: 0 3 * * *
|
|
type: string
|
|
prune:
|
|
default: 20 1 * * 0
|
|
type: string
|
|
type: object
|
|
secret_key:
|
|
default: s3-secret
|
|
type: string
|
|
secret_name:
|
|
default: backup-settings
|
|
type: string
|
|
use_barman:
|
|
default: false
|
|
type: boolean
|
|
type: object
|
|
customisation:
|
|
default:
|
|
configmap_name: ''
|
|
use_custom_css: false
|
|
use_icon_left: false
|
|
examples:
|
|
- configmap_name: ''
|
|
use_custom_css: false
|
|
use_icon_left: false
|
|
properties:
|
|
configmap_name:
|
|
default: ''
|
|
type: string
|
|
use_custom_css:
|
|
default: false
|
|
type: boolean
|
|
use_icon_left:
|
|
default: false
|
|
type: boolean
|
|
type: object
|
|
domain:
|
|
default: your-company
|
|
examples:
|
|
- your-company
|
|
type: string
|
|
domain_name:
|
|
default: your_company.com
|
|
examples:
|
|
- your_company.com
|
|
type: string
|
|
email:
|
|
default:
|
|
port: 587
|
|
timeout: 30
|
|
use_ssl: false
|
|
use_tls: false
|
|
examples:
|
|
- port: 587
|
|
timeout: 30
|
|
use_ssl: false
|
|
use_tls: false
|
|
properties:
|
|
port:
|
|
default: 587
|
|
type: integer
|
|
timeout:
|
|
default: 30
|
|
type: integer
|
|
use_ssl:
|
|
default: false
|
|
type: boolean
|
|
use_tls:
|
|
default: false
|
|
type: boolean
|
|
type: object
|
|
error_reporting:
|
|
default:
|
|
enabled: false
|
|
environment: k8s
|
|
send_pii: false
|
|
examples:
|
|
- enabled: false
|
|
environment: k8s
|
|
send_pii: false
|
|
properties:
|
|
enabled:
|
|
default: false
|
|
type: boolean
|
|
environment:
|
|
default: k8s
|
|
type: string
|
|
send_pii:
|
|
default: false
|
|
type: boolean
|
|
type: object
|
|
geoip:
|
|
default: /geoip/GeoLite2-City.mmdb
|
|
examples:
|
|
- /geoip/GeoLite2-City.mmdb
|
|
type: string
|
|
images:
|
|
default:
|
|
app:
|
|
project: goauthentik
|
|
pull_policy: IfNotPresent
|
|
registry: ghcr.io
|
|
repository: goauthentik/server
|
|
tag: 2024.4.2
|
|
kubectl:
|
|
pull_policy: IfNotPresent
|
|
registry: docker.io
|
|
repository: sebt3/basic-toolbox-image
|
|
tag: 1.29.3
|
|
postgresql:
|
|
registry: ghcr.io
|
|
repository: cloudnative-pg/postgresql
|
|
tag: 15.3
|
|
redis:
|
|
pull_policy: IfNotPresent
|
|
registry: quay.io
|
|
repository: opstree/redis
|
|
tag: v7.0.12
|
|
redis_exporter:
|
|
pull_policy: IfNotPresent
|
|
registry: quay.io
|
|
repository: opstree/redis-exporter
|
|
tag: v1.44.0
|
|
examples:
|
|
- app:
|
|
project: goauthentik
|
|
pull_policy: IfNotPresent
|
|
registry: ghcr.io
|
|
repository: goauthentik/server
|
|
tag: 2024.4.2
|
|
kubectl:
|
|
pull_policy: IfNotPresent
|
|
registry: docker.io
|
|
repository: sebt3/basic-toolbox-image
|
|
tag: 1.29.3
|
|
postgresql:
|
|
registry: ghcr.io
|
|
repository: cloudnative-pg/postgresql
|
|
tag: 15.3
|
|
redis:
|
|
pull_policy: IfNotPresent
|
|
registry: quay.io
|
|
repository: opstree/redis
|
|
tag: v7.0.12
|
|
redis_exporter:
|
|
pull_policy: IfNotPresent
|
|
registry: quay.io
|
|
repository: opstree/redis-exporter
|
|
tag: v1.44.0
|
|
properties:
|
|
app:
|
|
default:
|
|
project: goauthentik
|
|
pull_policy: IfNotPresent
|
|
registry: ghcr.io
|
|
repository: goauthentik/server
|
|
tag: 2024.4.2
|
|
properties:
|
|
project:
|
|
default: goauthentik
|
|
type: string
|
|
pull_policy:
|
|
default: IfNotPresent
|
|
enum:
|
|
- Always
|
|
- Never
|
|
- IfNotPresent
|
|
type: string
|
|
registry:
|
|
default: ghcr.io
|
|
type: string
|
|
repository:
|
|
default: goauthentik/server
|
|
type: string
|
|
tag:
|
|
default: 2024.4.2
|
|
type: string
|
|
type: object
|
|
kubectl:
|
|
default:
|
|
pull_policy: IfNotPresent
|
|
registry: docker.io
|
|
repository: sebt3/basic-toolbox-image
|
|
tag: 1.29.3
|
|
properties:
|
|
pull_policy:
|
|
default: IfNotPresent
|
|
type: string
|
|
registry:
|
|
default: docker.io
|
|
type: string
|
|
repository:
|
|
default: sebt3/basic-toolbox-image
|
|
type: string
|
|
tag:
|
|
default: 1.29.3
|
|
type: string
|
|
type: object
|
|
postgresql:
|
|
default:
|
|
registry: ghcr.io
|
|
repository: cloudnative-pg/postgresql
|
|
tag: 15.3
|
|
properties:
|
|
registry:
|
|
default: ghcr.io
|
|
type: string
|
|
repository:
|
|
default: cloudnative-pg/postgresql
|
|
type: string
|
|
tag:
|
|
default: 15.3
|
|
type: number
|
|
type: object
|
|
redis:
|
|
default:
|
|
pull_policy: IfNotPresent
|
|
registry: quay.io
|
|
repository: opstree/redis
|
|
tag: v7.0.12
|
|
properties:
|
|
pull_policy:
|
|
default: IfNotPresent
|
|
enum:
|
|
- Always
|
|
- Never
|
|
- IfNotPresent
|
|
type: string
|
|
registry:
|
|
default: quay.io
|
|
type: string
|
|
repository:
|
|
default: opstree/redis
|
|
type: string
|
|
tag:
|
|
default: v7.0.12
|
|
type: string
|
|
type: object
|
|
redis_exporter:
|
|
default:
|
|
pull_policy: IfNotPresent
|
|
registry: quay.io
|
|
repository: opstree/redis-exporter
|
|
tag: v1.44.0
|
|
properties:
|
|
pull_policy:
|
|
default: IfNotPresent
|
|
enum:
|
|
- Always
|
|
- Never
|
|
- IfNotPresent
|
|
type: string
|
|
registry:
|
|
default: quay.io
|
|
type: string
|
|
repository:
|
|
default: opstree/redis-exporter
|
|
type: string
|
|
tag:
|
|
default: v1.44.0
|
|
type: string
|
|
type: object
|
|
type: object
|
|
ingress_class:
|
|
default: traefik
|
|
examples:
|
|
- traefik
|
|
type: string
|
|
issuer:
|
|
default: letsencrypt-prod
|
|
examples:
|
|
- letsencrypt-prod
|
|
type: string
|
|
loglevel:
|
|
default: info
|
|
examples:
|
|
- info
|
|
type: string
|
|
postgres:
|
|
default:
|
|
replicas: 1
|
|
examples:
|
|
- replicas: 1
|
|
properties:
|
|
replicas:
|
|
default: 1
|
|
type: integer
|
|
type: object
|
|
redis:
|
|
default:
|
|
exporter:
|
|
enabled: true
|
|
examples:
|
|
- exporter:
|
|
enabled: true
|
|
properties:
|
|
exporter:
|
|
default:
|
|
enabled: true
|
|
properties:
|
|
enabled:
|
|
default: true
|
|
type: boolean
|
|
type: object
|
|
type: object
|
|
storage:
|
|
default:
|
|
postgres:
|
|
size: 8Gi
|
|
redis:
|
|
size: 8Gi
|
|
examples:
|
|
- postgres:
|
|
size: 8Gi
|
|
redis:
|
|
size: 8Gi
|
|
properties:
|
|
postgres:
|
|
default:
|
|
size: 8Gi
|
|
properties:
|
|
size:
|
|
default: 8Gi
|
|
type: string
|
|
type: object
|
|
redis:
|
|
default:
|
|
size: 8Gi
|
|
properties:
|
|
size:
|
|
default: 8Gi
|
|
type: string
|
|
type: object
|
|
type: object
|
|
sub_domain:
|
|
default: auth
|
|
examples:
|
|
- auth
|
|
type: string
|
|
dependencies:
|
|
- dist: null
|
|
category: core
|
|
component: cert-manager
|
|
- dist: null
|
|
category: core
|
|
component: secret-generator
|
|
- dist: null
|
|
category: crd
|
|
component: traefik
|
|
- dist: null
|
|
category: dbo
|
|
component: pg
|
|
- dist: null
|
|
category: dbo
|
|
component: redis
|
|
providers:
|
|
kubernetes: null
|
|
authentik: true
|
|
kubectl: true
|
|
postgresql: null
|
|
mysql: null
|
|
restapi: null
|
|
http: null
|
|
gitea: null
|
|
tfaddtype: null
|