---
apiVersion: traefik.containo.us/v1alpha1
kind: Middleware
metadata:
  namespace: traefik
  name: longhorn-authentik-forward
spec:
  forwardAuth:
    address: http://longhorn.roxedus.com/outpost.goauthentik.io/auth/traefik
    trustForwardHeader: true
    authResponseHeaders:
      - X-authentik-username
      - X-authentik-groups
      - X-authentik-email
      - X-authentik-name
      - X-authentik-uid
      - X-authentik-jwt
      - X-authentik-meta-jwks
      - X-authentik-meta-outpost
      - X-authentik-meta-provider
      - X-authentik-meta-app
      - X-authentik-meta-version
---
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: authentik-foorward-wildcard
spec:
  rules:
    - host: "*.roxedus.com"

      http:
        paths:
          - pathType: Prefix
            path: "/outpost.goauthentik.io/"
            backend:
              service:
                name: ak-outpost-localcluster
                port:
                  number: 9000