commit e044a9d9c4b1ae0b35518338893bcd5f91af4766
parent fc5ae36ad1a9e58ccf56a3d307bb5714f71a8df9
Author: MTRNord <mtrnord1@gmail.com>
Date: Mon, 6 May 2024 10:55:06 +0200
move authentik
Diffstat:
2 files changed, 15 insertions(+), 21 deletions(-)
diff --git a/apps/2024_cluster/kustomization.yaml b/apps/2024_cluster/kustomization.yaml
@@ -1,7 +1,7 @@
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
resources:
- #- ../base/authentik
+ - ../base/authentik
- ../base/victoria-metrics-k8s-stack
- ../base/traefik
- ../base/postgres-operator
diff --git a/apps/base/authentik/release.yaml b/apps/base/authentik/release.yaml
@@ -19,16 +19,16 @@ spec:
retries: 3
values:
authentik:
- secret_key: ENC[AES256_GCM,data:ifgZqFMQYOnnLskmXAInZU3djgOv36+mLbL5mfdPvzYx8ssxAnmXHCFwzf1yPu+9vtnh9CMVk0b6+FZhDxi4bA==,iv:W3ylGXHKThftHF4fpA1pzi4W1yCxgLC3R3GLDH+/uF8=,tag:e5r66PjTuc1K5k9fuU4w/g==,type:str]
+ secret_key: ENC[AES256_GCM,data:OC8U3Tvfhi/9shzzsJLB2dt8uNJ+rh+hH4/B0jMCIUyMn4qt63iA8arZvg7ajYwHg+vgOuwMfvqHEyVijHbVAQ==,iv:kU11QH+ZrAsk5y07exuKRfKLpSg/lOX659qam485YPI=,tag:4ePPuH/feB1JJlEsoJ6krQ==,type:str]
# This sends anonymous usage-data, stack traces on errors and
# performance data to sentry.io, and is fully opt-in
error_reporting:
enabled: true
postgresql:
- host: matrix-postgres-cluster.matrix-postgres-cluster.svc.cluster.local
+ host: postgres-cluster.postgres-cluster.svc.cluster.local
name: authentik
user: authentik
- password: ENC[AES256_GCM,data:U/NVJGQ6q6uEnR6m6UicmHgav2P/hWZLte7euD/Q5iMuAMNl3JPuZMohof+n71bMxP9slqmVLwV5FyoHCSyW0g==,iv:y45NLquLMbkMioinyWicKAlcn3h7y/wWGBdY7q9ZkvM=,tag:p8rrBRs5MQDEMft9adKJRA==,type:str]
+ password: ENC[AES256_GCM,data:fYkzGIPwywRp/NyxFgB0kGf9zHi5r1ojcRKVsir9nZ9BIiZ0DQfnNWcutU3VX3XnQDiUGNYYhAjoeAT/sl90vg==,iv:HXIR5hbbWUvjEkRbT8Htgs15oMFH7QmaOO3tk94G3os=,tag:MbrV0ZNn5UqbIXa8E6muPA==,type:str]
email:
# -- SMTP Server emails are sent from, fully optional
host: mail.nordgedanken.dev
@@ -36,7 +36,7 @@ spec:
# -- SMTP credentials, when left empty, no authentication will be done
username: support@nordgedanken.dev
# -- SMTP credentials, when left empty, no authentication will be done
- password: ENC[AES256_GCM,data:GGXeri5jPE0G,iv:X4pvuFXe1/45BoTzdpBY4OLbfpPKdxhHbyE+DN0dcjg=,tag:TSw8x3r+xrMtjhvzohQd5g==,type:str]
+ password: ENC[AES256_GCM,data:Zu2TxF14QVyI,iv:UAcoQyMGiYH731x9Mn5z0QwqGlWbIZyJAjZ6nvW6lFI=,tag:izrYCOv6A/IInDKzywdc8w==,type:str]
# -- Enable either use_tls or use_ssl, they can't be enabled at the same time.
use_tls: true
# -- Enable either use_tls or use_ssl, they can't be enabled at the same time.
@@ -48,7 +48,7 @@ spec:
server:
env:
- name: AUTHENTIK_LISTEN__TRUSTED_PROXY_CIDRS
- value: "127.0.0.0/8,10.0.0.0/8,172.16.0.0/12,192.168.0.0/16,fe80::/10,::1/128,10.244.0.0/16,fc00:0::/96,fd00::/7"
+ value: 127.0.0.0/8,10.0.0.0/8,172.16.0.0/12,192.168.0.0/16,fe80::/10,::1/128,10.244.0.0/16,fc00:0::/96,fd00::/7
ingress:
annotations:
cert-manager.io/cluster-issuer: letsencrypt-dns
@@ -56,7 +56,7 @@ spec:
hosts:
- auth.midnightthoughts.space
paths:
- - /
+ - /
pathType: Prefix
tls:
- hosts:
@@ -66,12 +66,6 @@ spec:
enabled: false
redis:
enabled: true
- global:
- tolerations:
- - key: arch
- operator: Equal
- value: arm64
- effect: NoSchedule
sops:
kms: []
gcp_kms: []
@@ -81,14 +75,14 @@ sops:
- recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBHOHZWQmc2SnUybGhxK1JP
- aEFHSm9zdEFMRGF4S0FCSGxYZVM3MnZ5NTBvCk0veHJOZjVjRVVOYS81Kys1TjRT
- dUNlU0ljQ1gwTXQ4UjVLVTFDSFpBU2MKLS0tIHhrUDVuekl4UVNDaDU1T0tkdjBp
- N00xSFkyK0t4eDFLYVNGeE5NYi96czgKUDXwyOO8mkBs0D2rj5VtSKfykFSkSqQs
- QjATUYdJOv90PnP2O24tZZTMBnVYf2pWlZ+YdJC0/oVVWowD/OOQqQ==
+ YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtQWZ3cFB4OWxCNCtQOTVp
+ MitTRS9wWmZiY3RKZzEvSVFSTXozc0xjK0ZFCnZEc3BrWmhwaUdqcDlkTWJYZDdw
+ NGN6d0FndGJSODQ3SWNabmViVXdOaTAKLS0tIGtHTVhJR3lZYU96d0VLZkcwR3Jv
+ Ungya0pOS1JISGJrNzcwK09hR2E4WXcKf1+r1WaHGBNWjgt+OKhHG1YAa9pYB3nr
+ Jw/5FPvQY4m/dQDUZFs9KzaKKQTxznirsdwkQj5jE97cGsK18Z4AZA==
-----END AGE ENCRYPTED FILE-----
- lastmodified: "2024-01-25T11:06:31Z"
- mac: ENC[AES256_GCM,data:e+7mzCleVwf/OWP6l6hgvTSIsgB5ZlHflJ7fW+WCOYQ95TQL8yhwm/oKNMYFlQGwBL6cHTbJHNHlCHBKZRB3QiOpmw9QuEyp+iPDiFvnT0FL42ZLNcsBdkd/BUhDUwAFW0IDq0KIkkkeS+NjOPxAz79U3h6IZsKli6uQ1V8VE+c=,iv:0FO8QuKtWnXR7snTFncALZie4qsp1miszbmhAORzwqc=,tag:tedyHbppGzB9t7QhYdKrUQ==,type:str]
+ lastmodified: "2024-05-06T08:54:49Z"
+ mac: ENC[AES256_GCM,data:2sYjrfoR1bJcmdAeXZJp04uKxLH5VJ/i2pvzCx2Isrwbz23LH1FDG5AHzcrSHVGAerqM5ATN46MtBM2QmUAAZHYWGsiPMMF536gNn/a2o+ya4s2fSmgq4CA4oMSFFrQxGQaGv3s0MgwXywuo5VpaBkbjijgQ0CYx0zkjcTrjA0Q=,iv:K+ojcISi7yC9VeDSW74rwsyV0dIKSPaMrkjixV+aPuA=,tag:8FDYWedZ86vpWP71/C+gLQ==,type:str]
pgp: []
- encrypted_regex: ^(secret_key|adminPassword|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret)$
+ encrypted_regex: ^(clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|PASSWD|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|adminPassword|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret)$
version: 3.8.1
