vynil/kydah-modules
3
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

WIP

Browse Source
This commit is contained in:
Xavier Mortelette
2024-10-05 16:12:13 +02:00
parent 2eafb09fa6
commit 1df9904e1c
1 changed files with 6 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
forward/forward.tf
View File

@@ -4,7 +4,7 @@ locals {
"app.kubernetes.io/component" = "authentik-forward" "app.kubernetes.io/component" = "authentik-forward"
}) })
external_url = format("https://%s", var.dns_name) external_url = format("https://%s", var.dns_name)
forward_outpost_results = jsondecode(data.http.get_forward_outpost.response_body).results forward_outpost_results = jsondecode(data.http.proxy_outpost.response_body).results
forward_outpost_providers = local.forward_outpost_results[0].providers forward_outpost_providers = local.forward_outpost_results[0].providers
forward_outpost_pk = local.forward_outpost_results[0].pk forward_outpost_pk = local.forward_outpost_results[0].pk
} }
@@ -21,9 +21,9 @@ resource "authentik_provider_proxy" "forward" {
access_token_validity = var.access_token_validity access_token_validity = var.access_token_validity
} }
data "http" "get_forward_outpost" { data "http" "proxy_outpost" {
depends_on = [authentik_provider_proxy.forward] depends_on = [authentik_provider_proxy.forward]
url = "http://authentik.${var.domain}-auth.svc/api/v3/outposts/instances/?name__iexact=forward" url = "http://authentik.${var.domain}-auth.svc/api/v3/outposts/instances/?name__iexact=${var.domain}-proxy-outpost"
method = "GET" method = "GET"
request_headers = var.request_headers request_headers = var.request_headers
lifecycle { lifecycle {
@@ -50,7 +50,7 @@ data "kubernetes_secret_v1" "authentik" {
} }
resource "authentik_service_connection_kubernetes" "local" { resource "authentik_service_connection_kubernetes" "local" {
# count = length(jsondecode(data.http.get_forward_outpost.response_body).results) == 0 ? 1 : 0 # count = length(jsondecode(data.http.proxy_outpost.response_body).results) == 0 ? 1 : 0
depends_on = [data.kubernetes_secret_v1.authentik] depends_on = [data.kubernetes_secret_v1.authentik]
name = "${var.domain}-local-forward" name = "${var.domain}-local-forward"
local = true local = true
@@ -63,7 +63,7 @@ resource "authentik_service_connection_kubernetes" "local" {
# } # }
resource "authentik_provider_proxy" "provider_forward" { resource "authentik_provider_proxy" "provider_forward" {
# count = length(jsondecode(data.http.get_forward_outpost.response_body).results) == 0 ? 1 : 0 # count = length(jsondecode(data.http.proxy_outpost.response_body).results) == 0 ? 1 : 0
name = "authentik-${var.domain}-forward-provider" name = "authentik-${var.domain}-forward-provider"
internal_host = "http://authentik-authentik" internal_host = "http://authentik-authentik"
external_host = "http://authentik-authentik" external_host = "http://authentik-authentik"
@@ -71,7 +71,7 @@ resource "authentik_provider_proxy" "provider_forward" {
} }
resource "authentik_outpost" "output_forward" { resource "authentik_outpost" "output_forward" {
# count = length(jsondecode(data.http.get_forward_outpost.response_body).results) == 0 ? 1 : 0 # count = length(jsondecode(data.http.proxy_outpost.response_body).results) == 0 ? 1 : 0
name = "forward" name = "forward"
type = "proxy" type = "proxy"
service_connection = authentik_service_connection_kubernetes.local.id service_connection = authentik_service_connection_kubernetes.local.id