authentik/docs/outposts/deploy-kubernetes.md

Outpost deployment on Kubernetes

Use the following manifest, replacing all values surrounded with __.

Afterwards, configure the proxy provider to connect to <service name>.<namespace>.svc.cluster.local, and update your Ingress to connect to the passbook-outpost service.

api_version: v1
kind: secret
metadata:
  labels:
    app.kubernetes.io/instance: test
    app.kubernetes.io/managed-by: passbook.beryju.org
    app.kubernetes.io/name: passbook-proxy
    app.kubernetes.io/version: 0.10.0
  name: passbook-outpost-api
string_data:
  passbook_host: '__PASSBOOK_URL__'
  passbook_host_insecure: 'true'
  token: '__PASSBOOK_TOKEN__'
type: Opaque
---
api_version: apps/v1
kind: deployment
metadata:
  labels:
    app.kubernetes.io/instance: test
    app.kubernetes.io/managed-by: passbook.beryju.org
    app.kubernetes.io/name: passbook-proxy
    app.kubernetes.io/version: 0.10.0
  name: passbook-outpost
spec:
  selector:
    match_labels:
      app.kubernetes.io/instance: test
      app.kubernetes.io/managed-by: passbook.beryju.org
      app.kubernetes.io/name: passbook-proxy
      app.kubernetes.io/version: 0.10.0
    template:
    metadata:
      labels:
        app.kubernetes.io/instance: test
        app.kubernetes.io/managed-by: passbook.beryju.org
        app.kubernetes.io/name: passbook-proxy
        app.kubernetes.io/version: 0.10.0
        spec:
      containers:
      -  env:
        - name: PASSBOOK_HOST
          value_from:
            secret_key_ref:
              key: passbook_host
              name: passbook-outpost-api
        - name: PASSBOOK_TOKEN
          value_from:
            secret_key_ref:
              key: token
              name: passbook-outpost-api
        - name: PASSBOOK_INSECURE
          value_from:
            secret_key_ref:
              key: passbook_host_insecure
              name: passbook-outpost-api
        image: beryju/passbook-proxy:0.10.0
        name: proxy
        ports:
        - containerPort: 4180
          name: http
          protocol: TCP
        - containerPort: 4443
          name: http
          protocol: TCP
---
api_version: v1
kind: service
metadata:
  labels:
    app.kubernetes.io/instance: test
    app.kubernetes.io/managed-by: passbook.beryju.org
    app.kubernetes.io/name: passbook-proxy
    app.kubernetes.io/version: 0.10.0
  name: passbook-outpost
spec:
  ports:
  - name: http
    port: 4180
    protocol: TCP
    targetPort: http
  - name: https
    port: 4443
    protocol: TCP
    targetPort: https
  selector:
    app.kubernetes.io/instance: test
    app.kubernetes.io/managed-by: passbook.beryju.org
    app.kubernetes.io/name: passbook-proxy
    app.kubernetes.io/version: 0.10.0
  type: ClusterIP