feat: update authentik chart to 2024.2

k8s/argo-apps/authentik.yaml

@@ -11,7 +11,7 @@ spec:
   sources:
     - chart: authentik
       repoURL: https://charts.goauthentik.io/
-      targetRevision: 2023.10.*
+      targetRevision: 2024.2.*
       helm:
         valuesObject:
           authentik:
@@ -26,7 +26,8 @@ spec:
                 timeout: 30
                 from: auth@fukurokuju.dev
               postgresql:
-                host: 192.168.1.13
+                host: 192.168.1.3
+                port: 55432
                 name: auth
                 user: file:///authentik-creds/pg_username
                 password: file:///authentik-creds/pg_password
@@ -34,49 +35,55 @@ spec:
                 host: 192.168.1.3
                 port: 30036
                 password: file:///authentik-creds/redis_password
-          volumeMounts:
-            - name: authentik-creds
-              mountPath: /authentik-creds
-            - name: media
-              mountPath: /media
-          volumes:
-            - name: authentik-creds
-              secret:
-                secretName: secrets-authentik
-            - name: media
-              persistentVolumeClaim:
-                claimName: pvc-authentik-media
-          autoscaling:
-            server:
+              error_reporting:
+                enabled: true
+          global:
+            volumeMounts:
+              - name: authentik-creds
+                mountPath: /authentik-creds
+              - name: media
+                mountPath: /media
+            volumes:
+              - name: authentik-creds
+                secret:
+                  secretName: secrets-authentik
+              - name: media
+                persistentVolumeClaim:
+                  claimName: pvc-authentik-media
+          server:
+            autoscaling:
               enabled: true
-              maxScaling: 3
-            worker:
+              minReplicas: 1
+              maxReplicas: 3
+            pdb:
               enabled: true
-          pdb:
-            server:
+              minAvailable: 1
+            service:
+              type: LoadBalancer
+              servicePortHttp: 9000
+              servicePortHttps: 9443
+            metrics:
               enabled: true
-              maxUnavailable: 2
-            worker:
-              enabled:
-                maxUnavailable: 4
-          service:
-            type: LoadBalancer
-            port: 9000
-            name: http
-          ingress:
-            enabled: true
-            ingressClassName: traefik
-            hosts:
-              - host: auth.fukurokuju.dev
-                paths:
-                  - path: "/"
-                    pathType: Prefix
-                    backend:
-                      service:
-                        name: http
-                        port:
-                          number: 9000
-                tls: []
+              service:
+                type: LoadBalancer
+              serviceMonitor:
+                enabled: true
+            ingress:
+              enabled: true
+              ingressClassName: traefik
+              hosts:
+                - auth.fukurokuju.dev
+              tls: []
+              https: true
+          worker:
+            autoscaling:
+              enabled: true
+              minReplicas: 2
+              maxReplicas: 6
+            pdb:
+              enabled: true
+              minAvailable: 2
+
     - repoURL: https://git.roboces.dev/catalin/fukuops.git
       path: k8s/services/authentik
       targetRevision: main