add auth

drcannoli · Sep 10, 2022 · df09d16 · df09d16
1 parent 31113e6
commit df09d16
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/cluster/apps/media/redacted-streams/helm-release.yaml b/cluster/apps/media/redacted-streams/helm-release.yaml
@@ -41,6 +41,14 @@ spec:
           cert-manager.io/cluster-issuer: letsencrypt-production
           external-dns/is-public: "true"
           external-dns.alpha.kubernetes.io/target: "ipv4.${SECRET_DOMAIN}"
+          nginx.ingress.kubernetes.io/auth-response-headers: >-
+            Set-Cookie,X-authentik-username,X-authentik-groups,X-authentik-email,X-authentik-name,X-authentik-uid
+          nginx.ingress.kubernetes.io/auth-signin: >-
+            https://redacted.milomon.ca//outpost.goauthentik.io/start?rd=$escaped_request_uri
+          nginx.ingress.kubernetes.io/auth-snippet: |
+            proxy_set_header X-Forwarded-Host $http_host;
+          nginx.ingress.kubernetes.io/auth-url: >-
+            http://ak-outpost-redacted.networking.svc.cluster.local:9000/outpost.goauthentik.io/auth/nginx
         hosts:
           - host: redacted.${SECRET_DOMAIN}
             paths: