71 lines
2.1 KiB
YAML
71 lines
2.1 KiB
YAML
secret:
|
|
# -- name of secret to store generated secret (like clientI)
|
|
name: ""
|
|
# -- label of secret to store generated secret
|
|
labels: {}
|
|
|
|
blueprint:
|
|
authentik:
|
|
# -- domain to authentik, used in generated url (like issuer)
|
|
domain: "https://auth.wrenix.eu"
|
|
# -- label of generated secret with blueprint
|
|
labels:
|
|
goauthentik_blueprint: "1"
|
|
provider:
|
|
# -- creat an provider for authentification (otherwise just a like in menu is created)
|
|
enabled: true
|
|
name: ""
|
|
authorizationFlow: "default-provider-authorization-implicit-consent"
|
|
# -- type of application connection, current support: oidc, saml and proxy
|
|
type: "oidc"
|
|
oidc:
|
|
clientType: "confidential"
|
|
# -- client id - generated if secret enabled
|
|
clientID:
|
|
# -- client secret - generated if secret enabled
|
|
clientSecret:
|
|
redirectURL: ""
|
|
# -- Need for non-curve / RSA
|
|
signingKey: ""
|
|
# -- Scope
|
|
scopes:
|
|
saml:
|
|
proxy:
|
|
externalHost:
|
|
skipPathRegex: ""
|
|
cookieDomain: ""
|
|
ingress:
|
|
# -- deploy ingress on application domain for e.g. logout (WIP)
|
|
enabled: false
|
|
# -- domain of application (where outpost should be deployed)
|
|
domain:
|
|
# -- service backend to authentik
|
|
backend: authentik
|
|
application:
|
|
# -- application name in menu
|
|
name: ""
|
|
# -- application slug
|
|
slug: "app-name"
|
|
# -- put this application in authentik in group
|
|
group: ""
|
|
# url to application
|
|
launchURL: ""
|
|
# -- open application in new tab
|
|
openInNewTab: false
|
|
# -- icon of application (url)
|
|
icon: ""
|
|
# -- description of application
|
|
description: ""
|
|
# -- publisher of application
|
|
publisher: ""
|
|
# -- uuid for bindPolicyID for group - if not set generated on secret for be stable (or groups: [] filled)
|
|
bindPolicyID:
|
|
policyEngineMode: "any"
|
|
# -- authentik groups created / give access to this application
|
|
# disable any groups by set groups: [] (to a slice)
|
|
# example:
|
|
# - slug: "app: grafana-admin"
|
|
# parent: "app: infra"
|
|
# bindID: uuid
|
|
#
|
|
groups:
|