unkin-agent
8f7b9360ad
Front /ui with an Authentik-authenticated oauth2-proxy while leaving every package-manager surface unauthenticated. - Add the oauth2-proxy ConfigMap, Deployment, Service and VMPodScrape. - Add the oauth-credentials VaultStaticSecret. - Split httproute: /ui and /oauth2 to oauth2-proxy (HTTPS, plus an HTTP redirect); everything else to the api Service on both listeners.
25 lines
487 B
YAML
25 lines
487 B
YAML
---
|
|
apiVersion: kustomize.config.k8s.io/v1beta1
|
|
kind: Kustomization
|
|
|
|
resources:
|
|
- api-deployment.yaml
|
|
- api-hpa.yaml
|
|
- configmap.yaml
|
|
- cnpg_cluster.yaml
|
|
- cnpg_backup.yaml
|
|
- cnpg_pooler.yaml
|
|
- gateway.yaml
|
|
- httproute.yaml
|
|
- namespace.yaml
|
|
- oauth2-proxy-configmap.yaml
|
|
- oauth2-proxy-deployment.yaml
|
|
- redis-deployment.yaml
|
|
- services.yaml
|
|
- ui-deployment.yaml
|
|
- ui-hpa.yaml
|
|
- vaultauth.yaml
|
|
- vaultstaticsecret.yaml
|
|
- vmpodscrape.yaml
|
|
- vpa.yaml
|