forked from catalin/fukuops
84 lines
2.5 KiB
YAML
84 lines
2.5 KiB
YAML
apiVersion: argoproj.io/v1alpha1
|
|
kind: Application
|
|
metadata:
|
|
name: authentik
|
|
namespace: argocd
|
|
spec:
|
|
destination:
|
|
name: ''
|
|
namespace: 'apps-fuku'
|
|
server: "https://kubernetes.default.svc"
|
|
sources:
|
|
- chart: authentik
|
|
repoURL: https://charts.goauthentik.io/
|
|
targetRevision: 2023.10.*
|
|
helm:
|
|
valuesObject:
|
|
authentik:
|
|
secret_key: file:///authentik-creds/secret_key
|
|
reporting_enabled: false
|
|
email:
|
|
host: mail.fukurokuju.dev
|
|
port: 465
|
|
password: file:///authentik-creds/email_password
|
|
username: auth@fukurokuju.dev
|
|
use_ssl: true
|
|
timeout: 30
|
|
from: auth@fukurokuju.dev
|
|
postgresql:
|
|
host: 192.168.1.13
|
|
name: auth
|
|
user: file:///authentik-creds/pg_username
|
|
password: file:///authentik-creds/pg_password
|
|
redis:
|
|
host: 192.168.1.3
|
|
port: 30036
|
|
password: file:///authentik-creds/redis_password
|
|
volumeMounts:
|
|
- name: authentik-creds
|
|
mountPath: /authentik-creds
|
|
- name: media
|
|
mountPath: /media
|
|
volumes:
|
|
- name: authentik-creds
|
|
secret:
|
|
secretName: secrets-authentik
|
|
- name: media
|
|
persistentVolumeClaim:
|
|
claimName: pvc-authentik-media
|
|
autoscaling:
|
|
server:
|
|
enabled: true
|
|
maxScaling: 3
|
|
worker:
|
|
enabled: true
|
|
pdb:
|
|
server:
|
|
enabled: true
|
|
maxUnavailable: 2
|
|
worker:
|
|
enabled:
|
|
maxUnavailable: 4
|
|
service:
|
|
type: LoadBalancer
|
|
port: 9000
|
|
name: http
|
|
ingress:
|
|
enabled: true
|
|
ingressClassName: traefik
|
|
hosts:
|
|
- host: auth.fukurokuju.dev
|
|
paths:
|
|
- path: "/"
|
|
pathType: Prefix
|
|
backend:
|
|
service:
|
|
name: authentik
|
|
port:
|
|
number: 9000
|
|
- repoURL: https://git.roboces.dev/catalin/fukuops.git
|
|
path: k8s/services/authentik
|
|
targetRevision: main
|
|
project: fuku
|
|
syncPolicy:
|
|
automated: { }
|