Funk-lab/k8s/apps/authentik/ingress.yaml at main - akadmin/Funk-lab - Forgejo: Beyond coding. We forge.

akadmin/Funk-lab

mirror of https://github.com/Alkatrazz24/Funk-lab.git synced 2026-07-08 07:24:42 +02:00

ALI YESILKAYA 87b786eb57

feat(auth): annuaire Authentik + portail consoles Guacamole (#76 )

- k8s/apps/authentik : IdP OIDC (auth.lab.local), namespace auth —
  server + worker 2026.5.3, Redis in-cluster, PG sur storage-01, PVC media
- k8s/apps/guacamole : portail consoles SSH web s01/g01 (portail.lab.local) —
  guacd + webapp 1.6.0, SSO OIDC vers Authentik, Job initdb idempotent
- ansible : rôle console_user (user sans sudo pour les consoles, s01 + g01),
  bases PG authentik/guacamole, secrets vault (mdp PG + clé SSH console)
- doc : admin/k8s/auth-portal.md (déploiement, config initiale, pièges)

Co-authored-by: Claude Fable 5 <noreply@anthropic.com>

2026-07-06 21:24:46 +02:00

14 lines

254 B

YAML

Raw Permalink Blame History

 apiVersion: traefik.io/v1alpha1
 kind: IngressRoute
 metadata:
   name: authentik
   namespace: auth
 spec:
   entryPoints:
     - web
   routes:
     - match: Host(`auth.lab.local`)
       kind: Rule
       services:
         - name: authentik
           port: 9000