Kjeld Schouten-LebbingandGitHub
faf5c2d9dd
**Description** <!-- Please include a summary of the change and which issue is fixed. Please also include relevant motivation and context. List any dependencies that are required for this change. --> ⚒️ Fixes # <!--(issue)--> **⚙️ Type of change** - [ ] ⚙️ Feature/App addition - [ ] 🪛 Bugfix - [ ] ⚠️ Breaking change (fix or feature that would cause existing functionality to not work as expected) - [ ] 🔃 Refactor of current code **🧪 How Has This Been Tested?** <!-- Please describe the tests that you ran to verify your changes. Provide instructions so we can reproduce. Please also list any relevant details for your test configuration --> **📃 Notes:** <!-- Please enter any other relevant information here --> **✔️ Checklist:** - [ ] ⚖️ My code follows the style guidelines of this project - [ ] 👀 I have performed a self-review of my own code - [ ] #️⃣ I have commented my code, particularly in hard-to-understand areas - [ ] 📄 I have made corresponding changes to the documentation - [ ] ⚠️ My changes generate no new warnings - [ ] 🧪 I have added tests to this description that prove my fix is effective or that my feature works - [ ] ⬆️ I increased versions for any altered app according to semantic versioning **➕ App addition** If this PR is an app addition please make sure you have done the following. - [ ] 🪞 I have opened a PR on [truecharts/containers](https://github.com/truecharts/containers) adding the container to TrueCharts mirror repo. - [ ] 🖼️ I have added an icon in the Chart's root directory called `icon.png` --- _Please don't blindly check all the boxes. Read them and only check those that apply. Those checkboxes are there for the reviewer to see what is this all about and the status of this PR with a quick glance._ Signed-off-by: Kjeld Schouten-Lebbing <kjeld@schouten-lebbing.nl>
617 lines
23 KiB
YAML
617 lines
23 KiB
YAML
# Include{groups}
|
|
portals:
|
|
open:
|
|
# Include{portalLink}
|
|
questions:
|
|
# Include{global}
|
|
# Include{workload}
|
|
# Include{workloadDeployment}
|
|
|
|
# Include{replicas1}
|
|
# Include{podSpec}
|
|
# Include{containerMain}
|
|
# Include{containerBasic}
|
|
# Include{containerAdvanced}
|
|
- variable: authentik
|
|
group: App Configuration
|
|
label: Authentik Configuration
|
|
schema:
|
|
additional_attrs: true
|
|
type: dict
|
|
attrs:
|
|
- variable: credentials
|
|
label: Credentials
|
|
schema:
|
|
additional_attrs: true
|
|
type: dict
|
|
attrs:
|
|
- variable: password
|
|
label: Password (Initial install only)
|
|
description: Password for <akadmin> user. Can be used for any flow executor
|
|
schema:
|
|
type: string
|
|
private: true
|
|
required: true
|
|
default: ""
|
|
- variable: general
|
|
label: General
|
|
schema:
|
|
additional_attrs: true
|
|
type: dict
|
|
attrs:
|
|
- variable: disable_update_check
|
|
label: Disable Update Check
|
|
description: Disable the inbuilt update-checker
|
|
schema:
|
|
type: boolean
|
|
default: false
|
|
- variable: disable_startup_analytics
|
|
label: Disable Startup Analytics
|
|
description: Disable startup analytics
|
|
schema:
|
|
type: boolean
|
|
default: true
|
|
- variable: allow_user_name_change
|
|
label: Allow User Name Change
|
|
description: Enable the ability for users to change their Name
|
|
schema:
|
|
type: boolean
|
|
default: true
|
|
- variable: allow_user_mail_change
|
|
label: Allow User Mail Change
|
|
description: Enable the ability for users to change their Email address
|
|
schema:
|
|
type: boolean
|
|
default: true
|
|
- variable: allow_user_username_change
|
|
label: Allow User Username Change
|
|
description: Enable the ability for users to change their Usernames
|
|
schema:
|
|
type: boolean
|
|
default: true
|
|
- variable: gdpr_compliance
|
|
label: GDPR Compliance
|
|
description: When enabled, all the events caused by a user will be deleted upon the user's deletion
|
|
schema:
|
|
type: boolean
|
|
default: true
|
|
- variable: impersonation
|
|
label: Impersonation
|
|
description: Globally enable / disable impersonation
|
|
schema:
|
|
type: boolean
|
|
default: true
|
|
- variable: avatars
|
|
label: Avatars
|
|
description: Configure how authentik should show avatars for users
|
|
schema:
|
|
type: string
|
|
default: gravatar,initials
|
|
- variable: token_length
|
|
label: Token Length
|
|
description: Configure the length of generated tokens
|
|
schema:
|
|
type: int
|
|
default: 128
|
|
- variable: footer_links
|
|
label: Footer Links
|
|
description: This option configures the footer links on the flow executor pages
|
|
schema:
|
|
type: string
|
|
default: ""
|
|
- variable: mail
|
|
label: e-Mail
|
|
schema:
|
|
additional_attrs: true
|
|
type: dict
|
|
attrs:
|
|
- variable: host
|
|
label: Mail Server Host
|
|
description: Sets host of mail server
|
|
schema:
|
|
type: string
|
|
default: ""
|
|
- variable: port
|
|
label: Mail Server Port
|
|
description: Sets port of mail server
|
|
schema:
|
|
type: int
|
|
default: 25
|
|
- variable: tls
|
|
label: Use TLS for authentication
|
|
description: Sets tls for mail server authentication
|
|
schema:
|
|
type: boolean
|
|
default: false
|
|
- variable: ssl
|
|
label: Use SSL for authentication
|
|
description: Sets ssl for mail server authentication
|
|
schema:
|
|
type: boolean
|
|
default: false
|
|
- variable: timeout
|
|
label: Timeout of authentication
|
|
description: Sets timeout for mail server authentication
|
|
schema:
|
|
type: int
|
|
default: 10
|
|
- variable: user
|
|
label: Username
|
|
description: Sets username of mail server
|
|
schema:
|
|
type: string
|
|
default: ""
|
|
- variable: pass
|
|
label: Password
|
|
description: Sets password of mail server
|
|
schema:
|
|
type: string
|
|
private: true
|
|
default: ""
|
|
- variable: from
|
|
label: From Address
|
|
description: Email address authentik will send from
|
|
schema:
|
|
type: string
|
|
default: ""
|
|
- variable: error_reporting
|
|
label: Error Reporting
|
|
schema:
|
|
additional_attrs: true
|
|
type: dict
|
|
attrs:
|
|
- variable: enabled
|
|
label: Enable Reporting
|
|
description: Enables error reporting
|
|
schema:
|
|
type: boolean
|
|
default: false
|
|
show_subquestions_if:
|
|
subquestions:
|
|
- variable: send_pii
|
|
label: Send Personal Data
|
|
description: Whether or not to send personal data, like usernames
|
|
schema:
|
|
type: boolean
|
|
default: false
|
|
- variable: environment
|
|
label: Environment
|
|
description: Unique environment that is attached to your error reports, should be set to your email address for example.
|
|
schema:
|
|
type: string
|
|
default: customer
|
|
- variable: logging
|
|
label: Logging
|
|
schema:
|
|
additional_attrs: true
|
|
type: dict
|
|
attrs:
|
|
- variable: log_level
|
|
label: Log Level
|
|
description: Log level for the server and worker containers
|
|
schema:
|
|
type: string
|
|
default: info
|
|
enum:
|
|
- value: trace
|
|
description: trace
|
|
- value: debug
|
|
description: debug
|
|
- value: info
|
|
description: info
|
|
- value: warning
|
|
description: warning
|
|
- value: error
|
|
description: error
|
|
- variable: ldap
|
|
label: LDAP
|
|
schema:
|
|
additional_attrs: true
|
|
type: dict
|
|
attrs:
|
|
- variable: tls_ciphers
|
|
label: TLS Ciphers
|
|
description: Allows configuration of TLS Ciphers for LDAP connections used by LDAP sources. Setting applies to all sources
|
|
schema:
|
|
type: string
|
|
default: "null"
|
|
- variable: outposts
|
|
group: App Configuration
|
|
label: Outpost Configuration
|
|
schema:
|
|
additional_attrs: true
|
|
type: dict
|
|
attrs:
|
|
- variable: ldap
|
|
label: LDAP
|
|
schema:
|
|
additional_attrs: true
|
|
type: dict
|
|
attrs:
|
|
- variable: enabled
|
|
label: Enable LDAP outpost
|
|
schema:
|
|
type: boolean
|
|
default: false
|
|
show_subquestions_if: true
|
|
subquestions:
|
|
- variable: overrideHost
|
|
label: Override Host
|
|
schema:
|
|
type: boolean
|
|
default: false
|
|
show_subquestions_if: true
|
|
subquestions:
|
|
- variable: host
|
|
label: Authentik Host
|
|
description: "URL of your Authentik server. (e.g. https://auth.domain.com)"
|
|
schema:
|
|
type: string
|
|
# TODO: Make them required again once Scale stable supports nested subquestions
|
|
# required: true
|
|
default: ""
|
|
- variable: insecure
|
|
label: Insecure
|
|
description: Check only if you accessing Authentik in an unsecure way
|
|
schema:
|
|
type: boolean
|
|
default: false
|
|
- variable: overrideToken
|
|
label: Override Token
|
|
description: Overrides the random generated token to provide your own
|
|
schema:
|
|
type: boolean
|
|
default: false
|
|
show_subquestions_if: true
|
|
subquestions:
|
|
- variable: token
|
|
label: API Token
|
|
description: You can get this from Applications > Outposts > View Deployment Info
|
|
schema:
|
|
type: string
|
|
private: true
|
|
# TODO: Make them required again once Scale stable supports nested subquestions
|
|
# required: true
|
|
default: ""
|
|
- variable: overrideBrowserHost
|
|
label: Override Host Browser
|
|
description: Overrides the Browser Host, by default the first ingress host is used
|
|
schema:
|
|
type: boolean
|
|
default: false
|
|
show_subquestions_if: true
|
|
subquestions:
|
|
- variable: host_browser
|
|
label: Host Browser
|
|
description: URL to use in the browser, when it differs from << host >>
|
|
schema:
|
|
type: string
|
|
# TODO: Make them required again once Scale stable supports nested subquestions
|
|
# required: true
|
|
default: ""
|
|
- variable: proxy
|
|
label: Proxy
|
|
schema:
|
|
additional_attrs: true
|
|
type: dict
|
|
attrs:
|
|
- variable: enabled
|
|
label: Enable Proxy outpost
|
|
schema:
|
|
type: boolean
|
|
default: false
|
|
show_subquestions_if: true
|
|
subquestions:
|
|
- variable: overrideHost
|
|
label: Override Host
|
|
schema:
|
|
type: boolean
|
|
default: false
|
|
show_subquestions_if: true
|
|
subquestions:
|
|
- variable: host
|
|
label: Authentik Host
|
|
description: "URL of your Authentik server. (e.g. https://auth.domain.com)"
|
|
schema:
|
|
type: string
|
|
# TODO: Make them required again once Scale stable supports nested subquestions
|
|
# required: true
|
|
default: ""
|
|
- variable: insecure
|
|
label: Insecure
|
|
description: Check only if you accessing Authentik in an unsecure way
|
|
schema:
|
|
type: boolean
|
|
default: false
|
|
- variable: overrideToken
|
|
label: Override Token
|
|
description: Overrides the random generated token to provide your own
|
|
schema:
|
|
type: boolean
|
|
default: false
|
|
show_subquestions_if: true
|
|
subquestions:
|
|
- variable: token
|
|
label: API Token
|
|
description: You can get this from Applications > Outposts > View Deployment Info
|
|
schema:
|
|
type: string
|
|
private: true
|
|
# TODO: Make them required again once Scale stable supports nested subquestions
|
|
# required: true
|
|
default: ""
|
|
- variable: overrideBrowserHost
|
|
label: Override Host Browser
|
|
description: Overrides the Browser Host, by default the first ingress host is used
|
|
schema:
|
|
type: boolean
|
|
default: false
|
|
show_subquestions_if: true
|
|
subquestions:
|
|
- variable: host_browser
|
|
label: Host Browser
|
|
description: URL to use in the browser, when it differs from << host >>
|
|
schema:
|
|
type: string
|
|
# TODO: Make them required again once Scale stable supports nested subquestions
|
|
# required: true
|
|
default: ""
|
|
- variable: geoip
|
|
group: App Configuration
|
|
label: GeoIP Configuration
|
|
schema:
|
|
additional_attrs: true
|
|
type: dict
|
|
attrs:
|
|
- variable: enabled
|
|
label: Enable GeoIP Container
|
|
description: Enables GeoIP container
|
|
schema:
|
|
type: boolean
|
|
default: false
|
|
show_subquestions_if: true
|
|
subquestions:
|
|
- variable: account_id
|
|
label: Account ID
|
|
description: Your MaxMind account ID
|
|
schema:
|
|
type: string
|
|
private: true
|
|
required: true
|
|
default: ""
|
|
- variable: license_key
|
|
label: License Key
|
|
description: Your case-sensitive MaxMind license key
|
|
schema:
|
|
type: string
|
|
private: true
|
|
required: true
|
|
default: ""
|
|
- variable: edition_ids
|
|
label: Edition IDs
|
|
description: List of space-separated database edition IDs. Edition IDs may consist of letters, digits, and dashes
|
|
schema:
|
|
type: string
|
|
required: true
|
|
default: GeoLite2-City
|
|
- variable: frequency
|
|
label: Frequency
|
|
description: The number of hours between geoipupdate runs
|
|
schema:
|
|
type: int
|
|
min: 1
|
|
default: 8
|
|
- variable: host_server
|
|
label: Host Server
|
|
description: The host name of the server to use
|
|
schema:
|
|
type: string
|
|
default: updates.maxmind.com
|
|
- variable: preserve_file_times
|
|
label: Preserve File Times
|
|
description: Whether to preserve modification times of files downloaded from the server
|
|
schema:
|
|
type: boolean
|
|
default: false
|
|
- variable: verbose
|
|
label: Verbose
|
|
description: Enable verbose mode. Prints out the steps that geoipupdate takes
|
|
schema:
|
|
type: boolean
|
|
default: false
|
|
- variable: proxy
|
|
label: Proxy
|
|
description: The proxy host name or IP address
|
|
schema:
|
|
type: string
|
|
default: ""
|
|
- variable: proxy_user_pass
|
|
label: Proxy Pass
|
|
description: The proxy user name and password, separated by a colon
|
|
schema:
|
|
type: string
|
|
private: true
|
|
default: ""
|
|
# Include{containerConfig}
|
|
# Include{podOptions}
|
|
# Include{serviceRoot}
|
|
- variable: main
|
|
label: Main Service
|
|
description: The Primary service on which the healthcheck runs, often the webUI
|
|
schema:
|
|
additional_attrs: true
|
|
type: dict
|
|
attrs:
|
|
# Include{serviceSelectorLoadBalancer}
|
|
# Include{serviceSelectorExtras}
|
|
- variable: main
|
|
label: Main Service Port Configuration
|
|
schema:
|
|
additional_attrs: true
|
|
type: dict
|
|
attrs:
|
|
- variable: port
|
|
label: Port
|
|
description: This port exposes the container port on the service
|
|
schema:
|
|
type: int
|
|
default: 10229
|
|
required: true
|
|
- variable: ldapldaps
|
|
label: LDAPS Service
|
|
description: The LDAPS service.
|
|
schema:
|
|
additional_attrs: true
|
|
type: dict
|
|
attrs:
|
|
# Include{serviceSelectorLoadBalancer}
|
|
# Include{serviceSelectorExtras}
|
|
- variable: ldapldaps
|
|
label: LDAPS Service Port Configuration
|
|
schema:
|
|
additional_attrs: true
|
|
type: dict
|
|
attrs:
|
|
- variable: port
|
|
label: Port
|
|
description: This port exposes the container port on the service
|
|
schema:
|
|
type: int
|
|
default: 636
|
|
required: true
|
|
- variable: ldapldap
|
|
label: LDAP Service
|
|
description: The LDAPS service.
|
|
schema:
|
|
additional_attrs: true
|
|
type: dict
|
|
attrs:
|
|
# Include{serviceSelectorLoadBalancer}
|
|
# Include{serviceSelectorExtras}
|
|
- variable: ldapldap
|
|
label: LDAP Service Port Configuration
|
|
schema:
|
|
additional_attrs: true
|
|
type: dict
|
|
attrs:
|
|
- variable: port
|
|
label: Port
|
|
description: This port exposes the container port on the service
|
|
schema:
|
|
type: int
|
|
default: 389
|
|
required: true
|
|
- variable: proxyhttps
|
|
label: Proxy HTTPS Service
|
|
description: The Proxy HTTPS service.
|
|
schema:
|
|
additional_attrs: true
|
|
type: dict
|
|
attrs:
|
|
# Include{serviceSelectorLoadBalancer}
|
|
# Include{serviceSelectorExtras}
|
|
- variable: proxyhttps
|
|
label: Proxy HTTPS Service Port Configuration
|
|
schema:
|
|
additional_attrs: true
|
|
type: dict
|
|
attrs:
|
|
- variable: port
|
|
label: Port
|
|
description: This port exposes the container port on the service
|
|
schema:
|
|
type: int
|
|
default: 10233
|
|
required: true
|
|
# Include{serviceExpertRoot}
|
|
default: false
|
|
# Include{serviceExpert}
|
|
# Include{serviceList}
|
|
# Include{persistenceRoot}
|
|
- variable: media
|
|
label: App Media Storage
|
|
description: Stores the Application Media.
|
|
schema:
|
|
additional_attrs: true
|
|
type: dict
|
|
attrs:
|
|
# Include{persistenceBasic}
|
|
- variable: templates
|
|
label: App Templates Storage
|
|
description: Stores the Application Templates.
|
|
schema:
|
|
additional_attrs: true
|
|
type: dict
|
|
attrs:
|
|
# Include{persistenceBasic}
|
|
- variable: certs
|
|
label: App Certs Storage
|
|
description: Stores the Application Certs.
|
|
schema:
|
|
additional_attrs: true
|
|
type: dict
|
|
attrs:
|
|
# Include{persistenceBasic}
|
|
- variable: geoip
|
|
label: App GeoIP Storage
|
|
description: Stores the Application GeoIP.
|
|
schema:
|
|
additional_attrs: true
|
|
type: dict
|
|
attrs:
|
|
# Include{persistenceBasic}
|
|
# Include{persistenceList}
|
|
# Include{ingressRoot}
|
|
- variable: main
|
|
label: Main (HTTPS) Ingress
|
|
schema:
|
|
additional_attrs: true
|
|
type: dict
|
|
attrs:
|
|
# Include{ingressDefault}
|
|
# Include{ingressTLS}
|
|
# Include{ingressTraefik}
|
|
- variable: proxyhttps
|
|
label: Proxy HTTPS Ingress
|
|
schema:
|
|
additional_attrs: true
|
|
type: dict
|
|
attrs:
|
|
# Include{ingressDefault}
|
|
# Include{ingressTLS}
|
|
# Include{ingressTraefik}
|
|
# Include{ingressList}
|
|
# Include{securityContextRoot}
|
|
|
|
- variable: runAsUser
|
|
label: "runAsUser"
|
|
description: "The UserID of the user running the application"
|
|
schema:
|
|
type: int
|
|
default: 1000
|
|
- variable: runAsGroup
|
|
label: "runAsGroup"
|
|
description: "The groupID of the user running the application"
|
|
schema:
|
|
type: int
|
|
default: 1000
|
|
# Include{securityContextContainer}
|
|
# Include{securityContextAdvanced}
|
|
# Include{securityContextPod}
|
|
- variable: fsGroup
|
|
label: "fsGroup"
|
|
description: "The group that should own ALL storage."
|
|
schema:
|
|
type: int
|
|
default: 568
|
|
|
|
# Include{resources}
|
|
# Include{metrics}
|
|
# Include{prometheusRule}
|
|
# Include{advanced}
|
|
# Include{addons}
|
|
# Include{codeserver}
|
|
# Include{netshoot}
|
|
# Include{vpn}
|
|
# Include{documentation}
|