Funk-lab/k8s/apps/authentik/pvc.yaml at 87b786eb57e147143c183e10923464bac5d905c8 - akadmin/Funk-lab - Forgejo: Beyond coding. We forge.

akadmin/Funk-lab

mirror of https://github.com/Alkatrazz24/Funk-lab.git synced 2026-07-08 17:44:42 +02:00

ALI YESILKAYA 87b786eb57

feat(auth): annuaire Authentik + portail consoles Guacamole (#76 )

- k8s/apps/authentik : IdP OIDC (auth.lab.local), namespace auth —
  server + worker 2026.5.3, Redis in-cluster, PG sur storage-01, PVC media
- k8s/apps/guacamole : portail consoles SSH web s01/g01 (portail.lab.local) —
  guacd + webapp 1.6.0, SSO OIDC vers Authentik, Job initdb idempotent
- ansible : rôle console_user (user sans sudo pour les consoles, s01 + g01),
  bases PG authentik/guacamole, secrets vault (mdp PG + clé SSH console)
- doc : admin/k8s/auth-portal.md (déploiement, config initiale, pièges)

Co-authored-by: Claude Fable 5 <noreply@anthropic.com>

2026-07-06 21:24:46 +02:00

13 lines

269 B

YAML

Raw Blame History

 apiVersion: v1
 kind: PersistentVolumeClaim
 metadata:
   name: authentik-media
   namespace: auth
 spec:
   # RWX : partagé entre server et worker (icônes, templates)
   accessModes:
     - ReadWriteMany
   storageClassName: nfs
   resources:
     requests:
       storage: 1Gi