alexlebens/infrastructure
1
0
Fork 0
Code Issues 1 Pull Requests 2 Actions Activity

chore: Update manifests after change

Browse Source
This commit is contained in:
gitea-bot
2026-02-25 23:46:35 +00:00
parent f0652b44a9
commit 87e07d2ca7
15 changed files with 322 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

21
clusters/cl01tl/manifests/authentik/ReferenceGrant-allow-outpost-cross-namespace-access.yaml
View File

@@ -9,9 +9,30 @@ metadata:
app.kubernetes.io/part-of: authentik app.kubernetes.io/part-of: authentik
spec: spec:
from: from:
- group: gateway.networking.k8s.io
kind: HTTPRoute
namespace: lidarr
- group: gateway.networking.k8s.io
kind: HTTPRoute
namespace: radarr
- group: gateway.networking.k8s.io
kind: HTTPRoute
namespace: radarr-4k
- group: gateway.networking.k8s.io
kind: HTTPRoute
namespace: radarr-anime
- group: gateway.networking.k8s.io
kind: HTTPRoute
namespace: radarr-standup
- group: gateway.networking.k8s.io
kind: HTTPRoute
namespace: sonarr
- group: gateway.networking.k8s.io - group: gateway.networking.k8s.io
kind: HTTPRoute kind: HTTPRoute
namespace: sonarr-4k namespace: sonarr-4k
- group: gateway.networking.k8s.io
kind: HTTPRoute
namespace: sonarr-anime
to: to:
- group: "" - group: ""
kind: Service kind: Service

17
clusters/cl01tl/manifests/lidarr/HTTPRoute-lidarr.yaml
View File

@@ -17,6 +17,17 @@ spec:
hostnames: hostnames:
- "lidarr.alexlebens.net" - "lidarr.alexlebens.net"
rules: rules:
- backendRefs:
- group: ""
kind: Service
name: ak-outpost-traefik-proxy-auth
namespace: authentik
port: 9000
weight: 100
matches:
- path:
type: PathPrefix
value: /outpost.goauthentik.io
- backendRefs: - backendRefs:
- group: "" - group: ""
kind: Service kind: Service
@@ -28,3 +39,9 @@ spec:
- path: - path:
type: PathPrefix type: PathPrefix
value: / value: /
filters:
- extensionRef:
group: traefik.io
kind: Middleware
name: oidc-forward-auth
type: ExtensionRef

26
clusters/cl01tl/manifests/lidarr/Middleware-oidc-forward-auth.yaml Normal file
View File

@@ -0,0 +1,26 @@
apiVersion: traefik.io/v1alpha1
kind: Middleware
metadata:
name: oidc-forward-auth
namespace: lidarr
labels:
app.kubernetes.io/name: oidc-forward-auth
app.kubernetes.io/instance: lidarr
app.kubernetes.io/part-of: lidarr
spec:
forwardAuth:
address: http://ak-outpost-traefik-proxy-auth.authentik.svc.cluster.local:9000/outpost.goauthentik.io/auth/traefik
trustForwardHeader: true
authResponseHeaders:
- X-authentik-username
- X-authentik-groups
- X-authentik-entitlements
- X-authentik-email
- X-authentik-name
- X-authentik-uid
- X-authentik-jwt
- X-authentik-meta-jwks
- X-authentik-meta-outpost
- X-authentik-meta-provider
- X-authentik-meta-app
- X-authentik-meta-version

17
clusters/cl01tl/manifests/radarr-4k/HTTPRoute-radarr-4k.yaml
View File

@@ -17,6 +17,17 @@ spec:
hostnames: hostnames:
- "radarr-4k.alexlebens.net" - "radarr-4k.alexlebens.net"
rules: rules:
- backendRefs:
- group: ""
kind: Service
name: ak-outpost-traefik-proxy-auth
namespace: authentik
port: 9000
weight: 100
matches:
- path:
type: PathPrefix
value: /outpost.goauthentik.io
- backendRefs: - backendRefs:
- group: "" - group: ""
kind: Service kind: Service
@@ -28,3 +39,9 @@ spec:
- path: - path:
type: PathPrefix type: PathPrefix
value: / value: /
filters:
- extensionRef:
group: traefik.io
kind: Middleware
name: oidc-forward-auth
type: ExtensionRef

26
clusters/cl01tl/manifests/radarr-4k/Middleware-oidc-forward-auth.yaml Normal file
View File

@@ -0,0 +1,26 @@
apiVersion: traefik.io/v1alpha1
kind: Middleware
metadata:
name: oidc-forward-auth
namespace: radarr-4k
labels:
app.kubernetes.io/name: oidc-forward-auth
app.kubernetes.io/instance: radarr-4k
app.kubernetes.io/part-of: radarr-4k
spec:
forwardAuth:
address: http://ak-outpost-traefik-proxy-auth.authentik.svc.cluster.local:9000/outpost.goauthentik.io/auth/traefik
trustForwardHeader: true
authResponseHeaders:
- X-authentik-username
- X-authentik-groups
- X-authentik-entitlements
- X-authentik-email
- X-authentik-name
- X-authentik-uid
- X-authentik-jwt
- X-authentik-meta-jwks
- X-authentik-meta-outpost
- X-authentik-meta-provider
- X-authentik-meta-app
- X-authentik-meta-version

17
clusters/cl01tl/manifests/radarr-anime/HTTPRoute-radarr-anime.yaml
View File

@@ -17,6 +17,17 @@ spec:
hostnames: hostnames:
- "radarr-anime.alexlebens.net" - "radarr-anime.alexlebens.net"
rules: rules:
- backendRefs:
- group: ""
kind: Service
name: ak-outpost-traefik-proxy-auth
namespace: authentik
port: 9000
weight: 100
matches:
- path:
type: PathPrefix
value: /outpost.goauthentik.io
- backendRefs: - backendRefs:
- group: "" - group: ""
kind: Service kind: Service
@@ -28,3 +39,9 @@ spec:
- path: - path:
type: PathPrefix type: PathPrefix
value: / value: /
filters:
- extensionRef:
group: traefik.io
kind: Middleware
name: oidc-forward-auth
type: ExtensionRef

26
clusters/cl01tl/manifests/radarr-anime/Middleware-oidc-forward-auth.yaml Normal file
View File

@@ -0,0 +1,26 @@
apiVersion: traefik.io/v1alpha1
kind: Middleware
metadata:
name: oidc-forward-auth
namespace: radarr-anime
labels:
app.kubernetes.io/name: oidc-forward-auth
app.kubernetes.io/instance: radarr-anime
app.kubernetes.io/part-of: radarr-anime
spec:
forwardAuth:
address: http://ak-outpost-traefik-proxy-auth.authentik.svc.cluster.local:9000/outpost.goauthentik.io/auth/traefik
trustForwardHeader: true
authResponseHeaders:
- X-authentik-username
- X-authentik-groups
- X-authentik-entitlements
- X-authentik-email
- X-authentik-name
- X-authentik-uid
- X-authentik-jwt
- X-authentik-meta-jwks
- X-authentik-meta-outpost
- X-authentik-meta-provider
- X-authentik-meta-app
- X-authentik-meta-version

17
clusters/cl01tl/manifests/radarr-standup/HTTPRoute-radarr-standup.yaml
View File

@@ -17,6 +17,17 @@ spec:
hostnames: hostnames:
- "radarr-standup.alexlebens.net" - "radarr-standup.alexlebens.net"
rules: rules:
- backendRefs:
- group: ""
kind: Service
name: ak-outpost-traefik-proxy-auth
namespace: authentik
port: 9000
weight: 100
matches:
- path:
type: PathPrefix
value: /outpost.goauthentik.io
- backendRefs: - backendRefs:
- group: "" - group: ""
kind: Service kind: Service
@@ -28,3 +39,9 @@ spec:
- path: - path:
type: PathPrefix type: PathPrefix
value: / value: /
filters:
- extensionRef:
group: traefik.io
kind: Middleware
name: oidc-forward-auth
type: ExtensionRef

26
clusters/cl01tl/manifests/radarr-standup/Middleware-oidc-forward-auth.yaml Normal file
View File

@@ -0,0 +1,26 @@
apiVersion: traefik.io/v1alpha1
kind: Middleware
metadata:
name: oidc-forward-auth
namespace: radarr-standup
labels:
app.kubernetes.io/name: oidc-forward-auth
app.kubernetes.io/instance: radarr-standup
app.kubernetes.io/part-of: radarr-standup
spec:
forwardAuth:
address: http://ak-outpost-traefik-proxy-auth.authentik.svc.cluster.local:9000/outpost.goauthentik.io/auth/traefik
trustForwardHeader: true
authResponseHeaders:
- X-authentik-username
- X-authentik-groups
- X-authentik-entitlements
- X-authentik-email
- X-authentik-name
- X-authentik-uid
- X-authentik-jwt
- X-authentik-meta-jwks
- X-authentik-meta-outpost
- X-authentik-meta-provider
- X-authentik-meta-app
- X-authentik-meta-version

17
clusters/cl01tl/manifests/radarr/HTTPRoute-radarr.yaml
View File

@@ -17,6 +17,17 @@ spec:
hostnames: hostnames:
- "radarr.alexlebens.net" - "radarr.alexlebens.net"
rules: rules:
- backendRefs:
- group: ""
kind: Service
name: ak-outpost-traefik-proxy-auth
namespace: authentik
port: 9000
weight: 100
matches:
- path:
type: PathPrefix
value: /outpost.goauthentik.io
- backendRefs: - backendRefs:
- group: "" - group: ""
kind: Service kind: Service
@@ -28,3 +39,9 @@ spec:
- path: - path:
type: PathPrefix type: PathPrefix
value: / value: /
filters:
- extensionRef:
group: traefik.io
kind: Middleware
name: oidc-forward-auth
type: ExtensionRef

26
clusters/cl01tl/manifests/radarr/Middleware-oidc-forward-auth.yaml Normal file
View File

@@ -0,0 +1,26 @@
apiVersion: traefik.io/v1alpha1
kind: Middleware
metadata:
name: oidc-forward-auth
namespace: radarr
labels:
app.kubernetes.io/name: oidc-forward-auth
app.kubernetes.io/instance: radarr
app.kubernetes.io/part-of: radarr
spec:
forwardAuth:
address: http://ak-outpost-traefik-proxy-auth.authentik.svc.cluster.local:9000/outpost.goauthentik.io/auth/traefik
trustForwardHeader: true
authResponseHeaders:
- X-authentik-username
- X-authentik-groups
- X-authentik-entitlements
- X-authentik-email
- X-authentik-name
- X-authentik-uid
- X-authentik-jwt
- X-authentik-meta-jwks
- X-authentik-meta-outpost
- X-authentik-meta-provider
- X-authentik-meta-app
- X-authentik-meta-version

17
clusters/cl01tl/manifests/sonarr-anime/HTTPRoute-sonarr-anime.yaml
View File

@@ -17,6 +17,17 @@ spec:
hostnames: hostnames:
- "sonarr-anime.alexlebens.net" - "sonarr-anime.alexlebens.net"
rules: rules:
- backendRefs:
- group: ""
kind: Service
name: ak-outpost-traefik-proxy-auth
namespace: authentik
port: 9000
weight: 100
matches:
- path:
type: PathPrefix
value: /outpost.goauthentik.io
- backendRefs: - backendRefs:
- group: "" - group: ""
kind: Service kind: Service
@@ -28,3 +39,9 @@ spec:
- path: - path:
type: PathPrefix type: PathPrefix
value: / value: /
filters:
- extensionRef:
group: traefik.io
kind: Middleware
name: oidc-forward-auth
type: ExtensionRef

26
clusters/cl01tl/manifests/sonarr-anime/Middleware-oidc-forward-auth.yaml Normal file
View File

@@ -0,0 +1,26 @@
apiVersion: traefik.io/v1alpha1
kind: Middleware
metadata:
name: oidc-forward-auth
namespace: sonarr-anime
labels:
app.kubernetes.io/name: oidc-forward-auth
app.kubernetes.io/instance: sonarr-anime
app.kubernetes.io/part-of: sonarr-anime
spec:
forwardAuth:
address: http://ak-outpost-traefik-proxy-auth.authentik.svc.cluster.local:9000/outpost.goauthentik.io/auth/traefik
trustForwardHeader: true
authResponseHeaders:
- X-authentik-username
- X-authentik-groups
- X-authentik-entitlements
- X-authentik-email
- X-authentik-name
- X-authentik-uid
- X-authentik-jwt
- X-authentik-meta-jwks
- X-authentik-meta-outpost
- X-authentik-meta-provider
- X-authentik-meta-app
- X-authentik-meta-version

17
clusters/cl01tl/manifests/sonarr/HTTPRoute-sonarr.yaml
View File

@@ -17,6 +17,17 @@ spec:
hostnames: hostnames:
- "sonarr.alexlebens.net" - "sonarr.alexlebens.net"
rules: rules:
- backendRefs:
- group: ""
kind: Service
name: ak-outpost-traefik-proxy-auth
namespace: authentik
port: 9000
weight: 100
matches:
- path:
type: PathPrefix
value: /outpost.goauthentik.io
- backendRefs: - backendRefs:
- group: "" - group: ""
kind: Service kind: Service
@@ -28,3 +39,9 @@ spec:
- path: - path:
type: PathPrefix type: PathPrefix
value: / value: /
filters:
- extensionRef:
group: traefik.io
kind: Middleware
name: oidc-forward-auth
type: ExtensionRef

26
clusters/cl01tl/manifests/sonarr/Middleware-oidc-forward-auth.yaml Normal file
View File

@@ -0,0 +1,26 @@
apiVersion: traefik.io/v1alpha1
kind: Middleware
metadata:
name: oidc-forward-auth
namespace: sonarr
labels:
app.kubernetes.io/name: oidc-forward-auth
app.kubernetes.io/instance: sonarr
app.kubernetes.io/part-of: sonarr
spec:
forwardAuth:
address: http://ak-outpost-traefik-proxy-auth.authentik.svc.cluster.local:9000/outpost.goauthentik.io/auth/traefik
trustForwardHeader: true
authResponseHeaders:
- X-authentik-username
- X-authentik-groups
- X-authentik-entitlements
- X-authentik-email
- X-authentik-name
- X-authentik-uid
- X-authentik-jwt
- X-authentik-meta-jwks
- X-authentik-meta-outpost
- X-authentik-meta-provider
- X-authentik-meta-app
- X-authentik-meta-version