trustchain-oc1-orchestral/authentik
Archived
10
0
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity

docs: update manual k8s outpost deployment

Browse source
This commit is contained in:
Jens Langhammer 2021-03-05 15:30:41 +01:00
parent de4b3d6290
commit 0e9e378bdf
2 changed files with 99 additions and 74 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
.bumpversion.cfg
View file

@ -38,3 +38,5 @@ values =
[bumpversion:file:web/src/constants.ts] [bumpversion:file:web/src/constants.ts]
[bumpversion:file:website/docs/outpusts/manual-deploy-docker-compose.md] [bumpversion:file:website/docs/outpusts/manual-deploy-docker-compose.md]
[bumpversion:file:website/docs/outpusts/manual-deploy-kubernetes.md]

171
website/docs/outposts/manual-deploy-kubernetes.md
View file

@ -10,92 +10,115 @@ Afterwards, configure the proxy provider to connect to `<service name>.<namespac
apiVersion: v1 apiVersion: v1
kind: Secret kind: Secret
metadata: metadata:
labels: labels:
app.kubernetes.io/instance: test app.kubernetes.io/instance: __OUTPOST_NAME__
app.kubernetes.io/managed-by: goauthentik.io app.kubernetes.io/managed-by: goauthentik.io
app.kubernetes.io/name: authentik-proxy app.kubernetes.io/name: authentik-proxy
app.kubernetes.io/version: 0.10.0 app.kubernetes.io/version: 2021.3.2
name: authentik-outpost-api name: authentik-outpost-api
stringData: stringData:
authentik_host: "__AUTHENTIK_URL__" authentik_host: "__AUTHENTIK_URL__"
authentik_host_insecure: "true" authentik_host_insecure: "true"
token: "__AUTHENTIK_TOKEN__" token: "__AUTHENTIK_TOKEN__"
type: Opaque type: Opaque
--- ---
apiVersion: v1 apiVersion: v1
kind: Service kind: Service
metadata: metadata:
labels: labels:
app.kubernetes.io/instance: test app.kubernetes.io/instance: __OUTPOST_NAME__
app.kubernetes.io/managed-by: goauthentik.io app.kubernetes.io/managed-by: goauthentik.io
app.kubernetes.io/name: authentik-proxy app.kubernetes.io/name: authentik-proxy
app.kubernetes.io/version: 0.10.0 app.kubernetes.io/version: 2021.3.2
name: authentik-outpost name: authentik-outpost
spec: spec:
ports: ports:
- name: http - name: http
port: 4180 port: 4180
protocol: TCP protocol: TCP
targetPort: http targetPort: http
- name: https - name: https
port: 4443 port: 4443
protocol: TCP protocol: TCP
targetPort: https targetPort: https
selector: type: ClusterIP
app.kubernetes.io/instance: test selector:
app.kubernetes.io/managed-by: goauthentik.io app.kubernetes.io/managed-by: goauthentik.io
app.kubernetes.io/name: authentik-proxy app.kubernetes.io/name: authentik-outpost
app.kubernetes.io/version: 0.10.0 app.kubernetes.io/instance: __OUTPOST_NAME__
type: ClusterIP
--- ---
apiVersion: apps/v1 apiVersion: apps/v1
kind: Deployment kind: Deployment
metadata: metadata:
labels: labels:
app.kubernetes.io/instance: test app.kubernetes.io/instance: __OUTPOST_NAME__
app.kubernetes.io/managed-by: goauthentik.io
app.kubernetes.io/name: authentik-proxy
app.kubernetes.io/version: 2021.3.2
name: authentik-outpost
spec:
selector:
matchLabels:
app.kubernetes.io/instance: __OUTPOST_NAME__
app.kubernetes.io/managed-by: goauthentik.io
app.kubernetes.io/name: authentik-proxy
app.kubernetes.io/version: 2021.3.2
template:
metadata:
labels:
app.kubernetes.io/instance: __OUTPOST_NAME__
app.kubernetes.io/managed-by: goauthentik.io app.kubernetes.io/managed-by: goauthentik.io
app.kubernetes.io/name: authentik-proxy app.kubernetes.io/name: authentik-proxy
app.kubernetes.io/version: 0.10.0 app.kubernetes.io/version: 2021.3.2
name: authentik-outpost spec:
containers:
- env:
- name: AUTHENTIK_HOST
valueFrom:
secretKeyRef:
key: authentik_host
name: authentik-outpost-api
- name: AUTHENTIK_TOKEN
valueFrom:
secretKeyRef:
key: token
name: authentik-outpost-api
- name: AUTHENTIK_INSECURE
valueFrom:
secretKeyRef:
key: authentik_host_insecure
name: authentik-outpost-api
image: beryju/authentik-proxy:2021.3.2
name: proxy
ports:
- containerPort: 4180
name: http
protocol: TCP
- containerPort: 4443
name: https
protocol: TCP
---
apiVersion: extensions/v1beta1
kind: Ingress
metadata:
annotations:
nginx.ingress.kubernetes.io/affinity: cookie
nginx.ingress.kubernetes.io/proxy-buffer-size: 16k
nginx.ingress.kubernetes.io/proxy-buffers-number: "4"
traefik.ingress.kubernetes.io/affinity: "true"
labels:
app.kubernetes.io/instance: __OUTPOST_NAME__
app.kubernetes.io/managed-by: goauthentik.io
app.kubernetes.io/name: authentik-proxy
app.kubernetes.io/version: 2021.3.2
name: authentik-outpost
spec: spec:
selector: rules:
matchLabels: - host: __EXTERNAL_HOSTNAME__
app.kubernetes.io/instance: test http:
app.kubernetes.io/managed-by: goauthentik.io paths:
app.kubernetes.io/name: authentik-proxy - backend:
app.kubernetes.io/version: 0.10.0 serviceName: authentik-outpost
template: servicePort: http
metadata: path: /
labels:
app.kubernetes.io/instance: test
app.kubernetes.io/managed-by: goauthentik.io
app.kubernetes.io/name: authentik-proxy
app.kubernetes.io/version: 0.10.0
spec:
containers:
- env:
- name: AUTHENTIK_HOST
valueFrom:
secretKeyRef:
key: authentik_host
name: authentik-outpost-api
- name: AUTHENTIK_TOKEN
valueFrom:
secretKeyRef:
key: token
name: authentik-outpost-api
- name: AUTHENTIK_INSECURE
valueFrom:
secretKeyRef:
key: authentik_host_insecure
name: authentik-outpost-api
image: beryju/authentik-proxy:0.10.0-stable
name: proxy
ports:
- containerPort: 4180
name: http
protocol: TCP
- containerPort: 4443
name: https
protocol: TCP
``` ```