fukuops/k8s/argo-apps/authentik.yaml

77 lines
2.1 KiB
YAML

apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
name: authentik
namespace: argocd
spec:
destination:
name: ''
namespace: 'apps-fuku'
server: "https://kubernetes.default.svc"
source:
chart: authentik
repoURL: https://charts.goauthentik.io/
targetRevision: 2023.10.5
helm:
valuesObject:
authentik:
secret_key: file:///authentik-creds/secret_key
reporting_enabled: false
email:
host: mail.fukurokuju.dev
port: 465
password: file:///authentik-creds/email_password
username: auth@fukurokuju.dev
use_ssl: true
timeout: 30
from: auth@fukurokuju.dev
postgresql:
host: 192.168.1.13
name: auth
user: file:///authentik-creds/pg_username
password: file:///authentik-creds/pg_password
redis:
host: 192.168.1.3
port: 30036
password: file:///authentik-creds/redis_password
volumeMounts:
- name: authentik-creds
mountPath: /authentik-creds
volumes:
- name: authentik-creds
secret:
secretName: secrets-authentik
autoscaling:
server:
enabled: true
maxScaling: 3
worker:
enabled: true
pdb:
server:
enabled: true
maxUnavailable: 2
worker:
enabled:
maxUnavailable: 4
service:
type: LoadBalancer
port: 9000
name: http
ingress:
enabled: true
ingressClassName: traefik
hosts:
- host: auth.fukurokuju.dev
paths:
- path: "/"
pathType: Prefix
backend:
service:
name: authentik
port:
number: 9000
project: fuku
sources: []
syncPolicy:
automated: { }