Automated Manifest Update (#4244)

This PR contains newly rendered Kubernetes manifests automatically generated by the CI workflow.

Reviewed-on: #4244
Co-authored-by: gitea-bot <gitea-bot@alexlebens.net>
Co-committed-by: gitea-bot <gitea-bot@alexlebens.net>

clusters/cl01tl/manifests/radarr-standup/HTTPRoute-radarr-standup.yaml

@@ -17,6 +17,17 @@ spec:
   hostnames:
     - "radarr-standup.alexlebens.net"
   rules:
+    - backendRefs:
+        - group: ""
+          kind: Service
+          name: ak-outpost-traefik-proxy-auth
+          namespace: authentik
+          port: 9000
+          weight: 100
+      matches:
+        - path:
+            type: PathPrefix
+            value: /outpost.goauthentik.io
     - backendRefs:
         - group: ""
           kind: Service
@@ -28,3 +39,9 @@ spec:
         - path:
             type: PathPrefix
             value: /
+      filters:
+        - extensionRef:
+            group: traefik.io
+            kind: Middleware
+            name: oidc-forward-auth
+          type: ExtensionRef

clusters/cl01tl/manifests/radarr-standup/Middleware-oidc-forward-auth.yaml

@@ -0,0 +1,26 @@
+apiVersion: traefik.io/v1alpha1
+kind: Middleware
+metadata:
+  name: oidc-forward-auth
+  namespace: radarr-standup
+  labels:
+    app.kubernetes.io/name: oidc-forward-auth
+    app.kubernetes.io/instance: radarr-standup
+    app.kubernetes.io/part-of: radarr-standup
+spec:
+  forwardAuth:
+    address: http://ak-outpost-traefik-proxy-auth.authentik.svc.cluster.local:9000/outpost.goauthentik.io/auth/traefik
+    trustForwardHeader: true
+    authResponseHeaders:
+      - X-authentik-username
+      - X-authentik-groups
+      - X-authentik-entitlements
+      - X-authentik-email
+      - X-authentik-name
+      - X-authentik-uid
+      - X-authentik-jwt
+      - X-authentik-meta-jwks
+      - X-authentik-meta-outpost
+      - X-authentik-meta-provider
+      - X-authentik-meta-app
+      - X-authentik-meta-version