582812b3ec
website: Copy files during build. website: Allow for mixed env builds. website: Reduce build size. website: Expose build. website: Add build memory debugging. WIP: Disable broken links check to compare memory usage. website: Update deps. website: Clean up API paths. website: Flesh out 3.8 fixes. Format. website: Update ignore paths. Website: Clean up integrations build. website: Fix paths. website: Optimize remark. website: Update deps. website: Format. website: Remove linking. website: Fix paths. wip: Attempt API only build. Prep. Migrate render to runtime. Tidy sidebar. Clean up templates. docs: Move directory. WIP docs: Flesh out split. website: Fix issue where routes have collisions.
95 lines
3.7 KiB
Markdown
95 lines
3.7 KiB
Markdown
```yaml
|
|
# Log level that the outpost will set
|
|
# Allowed levels: trace, debug, info, warning, error
|
|
# Applies to: non-embedded
|
|
log_level: debug
|
|
# Interval at which the outpost will refresh the providers
|
|
# from authentik. For caching outposts (such as LDAP), the
|
|
# cache will also be invalidated at that interval.
|
|
# (Format: hours=1;minutes=2;seconds=3).
|
|
refresh_interval: minutes=5
|
|
########################################
|
|
# The settings below are only relevant when using a managed outpost
|
|
########################################
|
|
# URL that the outpost uses to connect back to authentik
|
|
authentik_host: https://authentik.tld/
|
|
# Disable SSL Validation for the authentik connection
|
|
authentik_host_insecure: false
|
|
# Optionally specify a different URL used for user-facing interactions
|
|
# Applies to: proxy outposts
|
|
authentik_host_browser:
|
|
# Template used for objects created (deployments/containers, services, secrets, etc)
|
|
object_naming_template: ak-outpost-%(name)s
|
|
# Use a specific docker image for this outpost rather than the default. This also applies to Kubernetes
|
|
# outposts.
|
|
# Applies to: non-embedded
|
|
container_image:
|
|
########################################
|
|
# Docker outpost specific settings
|
|
########################################
|
|
# Network the outpost container should be connected to
|
|
# Applies to: non-embedded
|
|
docker_network: null
|
|
# Optionally disable mapping of ports to outpost container, may be useful when using docker networks
|
|
# (Available with 2021.9.4+)
|
|
# Applies to: non-embedded
|
|
docker_map_ports: true
|
|
# Optionally additional labels for docker containers
|
|
# (Available with 2022.1.2)
|
|
# Applies to: non-embedded
|
|
docker_labels: null
|
|
########################################
|
|
# Kubernetes outpost specific settings
|
|
########################################
|
|
# Replica count for the deployment of the outpost
|
|
# Applies to: non-embedded
|
|
kubernetes_replicas: 1
|
|
# Namespace to deploy in, defaults to the same namespace authentik is deployed in (if available)
|
|
kubernetes_namespace: authentik
|
|
# Any additional annotations to add to the ingress object, for example cert-manager
|
|
kubernetes_ingress_annotations: {}
|
|
# Name of the secret that is used for TLS connections, leave empty to disable TLS
|
|
kubernetes_ingress_secret_name: authentik-outpost-tls
|
|
# Service kind created, can be set to LoadBalancer for LDAP outposts for example
|
|
kubernetes_service_type: ClusterIP
|
|
# Disable any components of the kubernetes integration, can be any of
|
|
# - 'secret'
|
|
# - 'deployment'
|
|
# - 'service'
|
|
# - 'prometheus servicemonitor'
|
|
# - 'ingress'
|
|
# - 'traefik middleware'
|
|
kubernetes_disabled_components: []
|
|
# If the above docker image is in a private repository, use these secrets to pull.
|
|
# NOTE: The secret must be created manually in the namespace first.
|
|
# Applies to: non-embedded
|
|
kubernetes_image_pull_secrets: []
|
|
# Optionally configure an ingress class name. If not set, the ingress will use the cluster's
|
|
# default ingress class
|
|
# (Available with 2022.11.0+)
|
|
# Applies to: proxy outposts
|
|
kubernetes_ingress_class_name: null
|
|
# Optionally apply an RFC 6902 compliant patch to the Kubernetes objects.
|
|
# For an understanding of how this works, refer to the link below:
|
|
# https://github.com/kubernetes-sigs/kustomize/blob/master/examples/jsonpatch.md
|
|
#
|
|
# This value expects a mapping where the key represents
|
|
# the Kubernetes component that shall be patched.
|
|
# It can be any of the same values supported by `kubernetes_disabled_components`.
|
|
#
|
|
# For example use this patch to add custom resource requests and limits
|
|
# to the outpost deployment:
|
|
#
|
|
# deployment:
|
|
# - op: add
|
|
# path: "/spec/template/spec/containers/0/resources"
|
|
# value:
|
|
# requests:
|
|
# cpu: 2000m
|
|
# memory: 2000Mi
|
|
# limits:
|
|
# cpu: 4000m
|
|
# memory: 8000Mi
|
|
kubernetes_json_patches: null
|
|
```
|