{{- if (.Capabilities.APIVersions.Has "traefik.io/v1alpha1/Middleware") }}
apiVersion: traefik.io/v1alpha1
kind: Middleware
metadata:
    name: {{ .Release.Name }}-outpost
spec:
    forwardAuth:
        address: http://{{ .Release.Name }}-hr-server.{{ .Release.Namespace}}.svc/outpost.goauthentik.io/auth/traefik
        trustForwardHeader: true
        authResponseHeaders:
            - X-authentik-username
            - X-authentik-groups
            - X-authentik-email
            - X-authentik-name
            - X-authentik-uid
            - X-authentik-jwt
            - X-authentik-meta-jwks
            - X-authentik-meta-outpost
            - X-authentik-meta-provider
            - X-authentik-meta-app
            - X-authentik-meta-version
{{- end }}