Update 2 files

- /internalproxy/templates/duplicati-ingress.yaml
- /traefik/templates/middlewares.yaml
This commit is contained in:
2023-04-10 01:26:43 +00:00
parent ef0157789a
commit 5c0c1cd018
2 changed files with 22 additions and 68 deletions

View File

@@ -25,48 +25,6 @@ subsets:
port: 8200 port: 8200
protocol: TCP protocol: TCP
#---
#
#apiVersion: networking.k8s.io/v1
#kind: Ingress
#metadata:
# name: duplicati-ingress
# annotations:
# kubernetes.io/ingress.class: nginx
# cert-manager.io/cluster-issuer: letsencrypt-production
# nginx.ingress.kubernetes.io/whitelist-source-range: "192.168.0.0/16"
# nginx.ingress.kubernetes.io/auth-url: |-
# http://ak-outpost-authentik-embedded-outpost.authentik.svc.cluster.local:9000/outpost.goauthentik.io/auth/nginx
# nginx.ingress.kubernetes.io/auth-signin: |-
# https://duplicati.internal.durp.info/outpost.goauthentik.io/start?rd=$escaped_request_uri
# nginx.ingress.kubernetes.io/auth-response-headers: |-
# Set-Cookie,X-authentik-username,X-authentik-groups,X-authentik-email,X-authentik-name,X-authentik-uid
# nginx.ingress.kubernetes.io/auth-snippet: |
# proxy_set_header X-Forwarded-Host $http_host;
#spec:
# rules:
# - host: duplicati.internal.durp.info
# http:
# paths:
# - path: /
# pathType: Prefix
# backend:
# service:
# name: duplicati
# port:
# number: 8200
# - path: /outpost.goauthentik.io
# pathType: Prefix
# backend:
# service:
# name: ak-outpost-authentik-embedded-outpost
# port:
# number: 9000
# tls:
# - hosts:
# - duplicati.internal.durp.info
# secretName: duplicati-tls
--- ---
apiVersion: traefik.containo.us/v1alpha1 apiVersion: traefik.containo.us/v1alpha1
@@ -75,8 +33,6 @@ metadata:
name: duplicati-ingress name: duplicati-ingress
annotations: annotations:
cert-manager.io/cluster-issuer: letsencrypt-production cert-manager.io/cluster-issuer: letsencrypt-production
#traefik.ingress.kubernetes.io/router.middlewares: default-auth@duplicati,auth-redirect@duplicati
#traefik.ingress.kubernetes.io/auth-type: forward
spec: spec:
entryPoints: entryPoints:
- websecure - websecure
@@ -97,29 +53,6 @@ spec:
tls: tls:
secretName: duplicati-tls secretName: duplicati-tls
---
apiVersion: traefik.containo.us/v1alpha1
kind: Middleware
metadata:
name: authentik
namespace: traefik
spec:
forwardAuth:
address: http://ak-outpost-authentik-embedded-outpost.authentik.svc.cluster.local:9000/outpost.goauthentik.io/auth/traefik
trustForwardHeader: true
authResponseHeaders:
- X-authentik-username
- X-authentik-groups
- X-authentik-email
- X-authentik-name
- X-authentik-uid
- X-authentik-jwt
- X-authentik-meta-jwks
- X-authentik-meta-outpost
- X-authentik-meta-provider
- X-authentik-meta-app
- X-authentik-meta-version
--- ---
kind: Service kind: Service

View File

@@ -0,0 +1,21 @@
apiVersion: traefik.containo.us/v1alpha1
kind: Middleware
metadata:
name: authentik
namespace: traefik
spec:
forwardAuth:
address: http://ak-outpost-authentik-embedded-outpost.authentik.svc.cluster.local:9000/outpost.goauthentik.io/auth/traefik
trustForwardHeader: true
authResponseHeaders:
- X-authentik-username
- X-authentik-groups
- X-authentik-email
- X-authentik-name
- X-authentik-uid
- X-authentik-jwt
- X-authentik-meta-jwks
- X-authentik-meta-outpost
- X-authentik-meta-provider
- X-authentik-meta-app
- X-authentik-meta-version