Argo/apps/templates/authentik.yaml

90 lines
2.0 KiB
YAML
Raw Normal View History

2022-11-30 13:32:46 +01:00
apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
name: authentik
namespace: argo-cd
finalizers:
- resources-finalizer.argocd.argoproj.io
spec:
destination:
server: https://kubernetes.default.svc
namespace: authentik
project: default
source:
chart: authentik
helm:
values: |
image:
repository: ghcr.io/goauthentik/server
tag: 2022.10.0
authentik:
error_reporting:
enabled: true
2022-11-30 13:50:44 +01:00
service:
enabled: true
type: ClusterIP
port: 9443
2022-11-30 13:56:30 +01:00
name: https
2022-11-30 13:50:44 +01:00
protocol: TCP
2022-11-30 13:32:46 +01:00
envValueFrom:
AUTHENTIK_POSTGRESQL__PASSWORD:
secretKeyRef:
key: postgresql-password
name: authentik-postgresql
AUTHENTIK_SECRET_KEY:
secretKeyRef:
key: AUTHENTIK_SECRET_KEY
name: authentik-secret
postgresql:
image:
registry: ghcr.io
repository: zcube/bitnami-compat/postgresql
tag: 11.18.0-debian-11-r39
enabled: true
auth:
existingSecret: authentik-postgresql
persistence:
enabled: true
storageClass: longhorn
accessModes:
- ReadWriteOnce
redis:
enabled: true
image:
registry: ghcr.io
repository: zcube/bitnami-compat/redis
tag: 6.2.7-debian-11-r39
repoURL: https://charts.goauthentik.io
targetRevision: 2022.09.0
syncPolicy:
automated:
prune: true
selfHeal: true
syncOptions:
- CreateNamespace=true
2022-11-30 13:44:56 +01:00
---
apiVersion: traefik.containo.us/v1alpha1
kind: IngressRoute
metadata:
name: authentik-traefik
namespace: authentik
spec:
entryPoints:
- websecure
routes:
- kind: Rule
match: Host("authentik.roxedus.com")
services:
2022-11-30 13:58:18 +01:00
- name: authentik
2022-11-30 13:44:56 +01:00
port: 9443
scheme: https
serversTransport: selfsigned
tls:
certResolver: cloudflare