add authentik

infra/argocd/templates/authentik.yaml

@@ -0,0 +1,21 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: authentik
+  namespace: argocd
+spec:
+  project: default
+  source:
+    repoURL: https://gitlab.com/developerdurp/homelab.git
+    targetRevision: main
+    path: infra/authentik
+  destination:
+    namespace: authentik
+    name: in-cluster
+  syncPolicy:
+    automated:
+      prune: true
+      selfHeal: true  
+    syncOptions:
+      - CreateNamespace=true 
+

infra/authentik/templates/ingress.yaml

@@ -1,42 +1,42 @@
-apiVersion: traefik.containo.us/v1alpha1
+#apiVersion: traefik.containo.us/v1alpha1
-kind: IngressRoute
+#kind: IngressRoute
-metadata:
+#metadata:
-  name: authentik-ingress
+#  name: authentik-ingress
-spec:
+#spec:
-  entryPoints:
+#  entryPoints:
-    - websecure
+#    - websecure
-  routes:
+#  routes:
-  - match: Host(`authentik.durp.info`) && PathPrefix(`/`) 
+#  - match: Host(`authentik.durp.info`) && PathPrefix(`/`) 
-    kind: Rule
+#    kind: Rule
-    services:
+#    services:
-    - name: authentik-server
+#    - name: authentik-server
-      port: 80
+#      port: 80
-  tls:
+#  tls:
-    secretName: authentik-tls
+#    secretName: authentik-tls
-
+#
----
+#---
-
+#
-apiVersion: cert-manager.io/v1
+#apiVersion: cert-manager.io/v1
-kind: Certificate
+#kind: Certificate
-metadata:
+#metadata:
-  name: authentik-tls
+#  name: authentik-tls
-spec:
+#spec:
-  secretName: authentik-tls
+#  secretName: authentik-tls
-  issuerRef:
+#  issuerRef:
-    name: letsencrypt-production
+#    name: letsencrypt-production
-    kind: ClusterIssuer
+#    kind: ClusterIssuer
-  commonName: "authentik.durp.info"
+#  commonName: "authentik.durp.info"
-  dnsNames:
+#  dnsNames:
-  - "authentik.durp.info" 
+#  - "authentik.durp.info" 
-
+#
----
+#---
-
+#
-kind: Service
+#kind: Service
-apiVersion: v1
+#apiVersion: v1
-metadata:
+#metadata:
-  name: authentik-external-dns
+#  name: authentik-external-dns
-  annotations:
+#  annotations:
-    external-dns.alpha.kubernetes.io/hostname: authentik.durp.info
+#    external-dns.alpha.kubernetes.io/hostname: authentik.durp.info
-spec:
+#spec:
-  type: ExternalName
+#  type: ExternalName
-  externalName: durp.info
+#  externalName: durp.info

infra/authentik/templates/secrets.yaml

@@ -11,18 +11,18 @@ spec:
   data:
   - secretKey: dbpass
     remoteRef:
-      key: secrets/authentik/database
+      key: kv/authentik/database
       property: dbpass
   - secretKey: secretkey
     remoteRef:
-      key: secrets/authentik/database
+      key: kv/authentik/database
       property: secretkey     
   - secretKey: postgresql-postgres-password 
     remoteRef:
-      key: secrets/authentik/database
+      key: kv/authentik/database
       property: dbpass
   - secretKey: postgresql-password 
     remoteRef:
-      key: secrets/authentik/database
+      key: kv/authentik/database
       property: dbpass