authentik init

infrastructure/05-authentik/base/values.yaml

@@ -0,0 +1,44 @@
+authentik:
+    secret_key: "---"
+    error_reporting:
+        enabled: true
+
+# add this block under the `authentik:` block in your values.yaml file
+# authentik:
+email:
+    # -- SMTP Server emails are sent from, fully optional
+    host: "---"
+    port: 587
+    # -- SMTP credentials. When left empty, no authentication will be done.
+    username: "---"
+    # -- SMTP credentials. When left empty, no authentication will be done.
+    password: "---"
+    # -- Enable either use_tls or use_ssl. They can't be enabled at the same time.
+    use_tls: true
+    # -- Enable either use_tls or use_ssl. They can't be enabled at the same time.
+    use_ssl: false
+    # -- Connection timeout in seconds
+    timeout: 30
+    # -- Email 'from' address can either be in the format "foo@bar.baz" or "authentik <foo@bar.baz>"
+    from: "authentik@steffenillium.de"
+
+
+global:
+    envFrom:
+      - secretRef:
+          name: authentik-secret
+
+server:
+    ingress:
+        # Specify kubernetes ingress controller class name
+        ingressClassName: traefik
+        enabled: true
+        hosts:
+            - authentik.steffenillium.de
+
+postgresql:
+    enabled: true
+    auth:
+        password: "---"
+redis:
+    enabled: true

infrastructure/05-authentik/kustomization.yaml

@@ -0,0 +1,18 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+namespace: authentik
+
+components:
+  - ../../components/front-region-selector.yaml
+
+resources:
+  - base/authentik-secret.yaml
+
+helmCharts:
+- name: authentik
+  includeCRDs: true
+  version: 2024.2.2
+  releaseName: "authentik"
+  repo: https://charts.goauthentik.io
+  valuesFile: base/values.yaml