helm-charts/authentik-application/values.yaml

71 lines
2.1 KiB
YAML
Raw Normal View History

2023-09-03 14:58:07 +02:00
secret:
# -- name of secret to store generated secret (like clientI)
2023-09-03 14:58:07 +02:00
name: ""
# -- label of secret to store generated secret
2023-09-03 14:58:07 +02:00
labels: {}
blueprint:
authentik:
# -- domain to authentik, used in generated url (like issuer)
2023-09-03 14:58:07 +02:00
domain: "https://auth.wrenix.eu"
# -- label of generated secret with blueprint
2023-09-03 14:58:07 +02:00
labels:
goauthentik_blueprint: "1"
provider:
# -- creat an provider for authentification (otherwise just a like in menu is created)
enabled: true
2023-09-03 14:58:07 +02:00
name: ""
authorizationFlow: "default-provider-authorization-implicit-consent"
# -- type of application connection, current support: oidc and proxy
type: "oidc" # or proxy
oidc:
clientType: "confidential"
# -- client id - generated if secret enabled
clientID:
# -- client secret - generated if secret enabled
clientSecret:
redirectURL: ""
# -- Need for non-curve / RSA
signingKey: ""
# -- Scope
scopes:
proxy:
externalHost:
skipPathRegex: ""
cookieDomain: ""
ingress:
# -- deploy ingress on application domain for e.g. logout (WIP)
enabled: false
# -- domain of application (where outpost should be deployed)
domain:
# -- service backend to authentik
backend: authentik
2023-09-03 14:58:07 +02:00
application:
# -- application name in menu
2023-09-03 14:58:07 +02:00
name: ""
# -- application slug
2023-09-03 14:58:07 +02:00
slug: "app-name"
# -- put this application in authentik in group
2023-09-03 14:58:07 +02:00
group: ""
# url to application
2023-09-03 14:58:07 +02:00
launchURL: ""
# -- open application in new tab
2023-09-03 14:58:07 +02:00
openInNewTab: false
# -- icon of application (url)
2023-09-03 14:58:07 +02:00
icon: ""
# -- description of application
2023-09-03 14:58:07 +02:00
description: ""
# -- publisher of application
2023-09-03 14:58:07 +02:00
publisher: ""
# -- uuid for bindPolicyID for group - if not set generated on secret for be stable (or groups: [] filled)
bindPolicyID:
policyEngineMode: "any"
# -- authentik groups created / give access to this application
# disable any groups by set groups: [] (to a slice)
# example:
# - slug: "app: grafana-admin"
# parent: "app: infra"
# bindID: uuid
#
groups: