From 1291d4fc10dbf587f0c00ad1464d2358205fa25c Mon Sep 17 00:00:00 2001 From: DeveloperDurp Date: Sun, 16 Apr 2023 14:39:36 +0000 Subject: [PATCH] Update 3 files - /authentik/values.yaml - /authentik/templates/ingress.yaml - /whoogle/templates/ingress.yaml --- authentik/templates/ingress.yaml | 30 +++++++++++++++++++ authentik/values.yaml | 2 +- whoogle/templates/ingress.yaml | 51 -------------------------------- 3 files changed, 31 insertions(+), 52 deletions(-) create mode 100644 authentik/templates/ingress.yaml diff --git a/authentik/templates/ingress.yaml b/authentik/templates/ingress.yaml new file mode 100644 index 0000000..dc90548 --- /dev/null +++ b/authentik/templates/ingress.yaml @@ -0,0 +1,30 @@ +apiVersion: traefik.containo.us/v1alpha1 +kind: IngressRoute +metadata: + name: authentik-ingress +spec: + entryPoints: + - websecure + routes: + - match: Host(`authentik.durp.info`) && PathPrefix(`/`) + kind: Rule + services: + - name: authentik + port: 80 + tls: + secretName: authentik-tls + +--- + +apiVersion: cert-manager.io/v1 +kind: Certificate +metadata: + name: authentik-tls +spec: + secretName: authentik-tls + issuerRef: + name: letsencrypt-production + kind: ClusterIssuer + commonName: "authentik.durp.info" + dnsNames: + - "authentik.durp.info" \ No newline at end of file diff --git a/authentik/values.yaml b/authentik/values.yaml index 1c9dbfd..6bd6e81 100644 --- a/authentik/values.yaml +++ b/authentik/values.yaml @@ -14,7 +14,7 @@ authentik: pullPolicy: Always ingress: - enabled: true + enabled: false ingressClassName: "traefik" annotations: cert-manager.io/cluster-issuer: letsencrypt-production diff --git a/whoogle/templates/ingress.yaml b/whoogle/templates/ingress.yaml index aa4db74..40cfd8a 100644 --- a/whoogle/templates/ingress.yaml +++ b/whoogle/templates/ingress.yaml @@ -1,54 +1,3 @@ -#apiVersion: networking.k8s.io/v1 -#kind: Ingress -#metadata: -# name: whoogle -# annotations: -# kubernetes.io/ingress.class: nginx -# nginx.ingress.kubernetes.io/proxy-body-size: "0" -# cert-manager.io/cluster-issuer: letsencrypt-production -# # nginx.ingress.kubernetes.io/auth-url: |- -# # http://ak-outpost-authentik-embedded-outpost.authentik.svc.cluster.local:9000/outpost.goauthentik.io/auth/nginx -# # nginx.ingress.kubernetes.io/auth-signin: |- -# # https://whoogle.durp.info/outpost.goauthentik.io/start?rd=$escaped_request_uri -# # nginx.ingress.kubernetes.io/auth-response-headers: |- -# # Set-Cookie,X-authentik-username,X-authentik-groups,X-authentik-email,X-authentik-name,X-authentik-uid -# # nginx.ingress.kubernetes.io/auth-snippet: | -# # proxy_set_header X-Forwarded-Host $http_host; -#spec: -# rules: -# - host: whoogle.durp.info -# http: -# paths: -# - path: / -# pathType: Prefix -# backend: -# service: -# name: whoogle -# port: -# number: 5000 -# - path: /outpost.goauthentik.io -# pathType: Prefix -# backend: -# service: -# name: ak-outpost-authentik-embedded-outpost -# port: -# number: 9000 -# tls: -# - hosts: -# - whoogle.durp.info -# secretName: whoogle-tls -# -#--- -# -#kind: Service -#apiVersion: v1 -#metadata: -# name: ak-outpost-authentik-embedded-outpost -#spec: -# type: ExternalName -# externalName: ak-outpost-authentik-embedded-outpost.authentik.svc.cluster.local - - apiVersion: traefik.containo.us/v1alpha1 kind: IngressRoute metadata: