45 lines
927 B
YAML
45 lines
927 B
YAML
global:
|
|
domain: cd.brunner.ninja
|
|
hostAliases:
|
|
- ip: 10.97.126.146
|
|
hostnames:
|
|
- brunner.ninja
|
|
- code.brunner.ninja
|
|
|
|
crds:
|
|
install: true
|
|
|
|
configs:
|
|
cm:
|
|
oidc.config: |
|
|
name: Authentik
|
|
issuer: https://auth.brunner.ninja/application/o/argocd/
|
|
clientID: argocd
|
|
clientSecret: $argocd-oidc:client-secret
|
|
requestedScopes: ["openid", "profile", "email", "groups"]
|
|
requestedIDTokenClaims:
|
|
groups:
|
|
essential: true
|
|
rbac:
|
|
policy.csv: |
|
|
g, authentik Admins, role:admin
|
|
policy.default: ''
|
|
scopes: '[groups]'
|
|
secret:
|
|
createSecret: false
|
|
params:
|
|
server.insecure: true
|
|
|
|
notifications:
|
|
secret:
|
|
create: false
|
|
|
|
redisSecretInit:
|
|
enabled: false
|
|
|
|
server:
|
|
ingress:
|
|
enabled: true
|
|
annotations:
|
|
traefik.ingress.kubernetes.io/router.entrypoints: websecure
|