SeanOMik
/
k3s-cluster
1
0
Fork 0
Code Issues 2 Pull Requests 33 Packages Projects Releases Wiki Activity

change authentik security context

This commit is contained in:
SeanOMik 2023-06-01 22:26:42 -04:00
parent 2b81ac71de
commit cf1be891ad
1 changed files with 14 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
cluster/apps/authentik/helm-release.yaml
View File

@ -16,6 +16,18 @@ spec:
name: authentik-charts name: authentik-charts
namespace: flux-system namespace: flux-system
values: values:
containerSecurityContext: &securityContext
runAsUser: 10000
runAsGroup: 10000
fsGroup: 10000
fsGroupChangePolicy: OnRootMismatch
worker:
containerSecurityContext: *securityContext
geoip:
containerSecurityContext: *securityContext
authentik: authentik:
# secret_key: "${SECRET_AUTHENTIK_SECRET_KEY}" # secret_key: "${SECRET_AUTHENTIK_SECRET_KEY}"
# This sends anonymous usage-data, stack traces on errors and # This sends anonymous usage-data, stack traces on errors and
@ -35,8 +47,8 @@ spec:
# password: "${SECRET_DATABASE_REDIS_PASS}" # password: "${SECRET_DATABASE_REDIS_PASS}"
env: env:
AUTHENTIK_HOST: https://auth.${SECRET_NEW_DOMAIN} AUTHENTIK_HOST: *host
AUTHENTIK_HOST_BROWSER: https://auth.${SECRET_NEW_DOMAIN} AUTHENTIK_HOST_BROWSER: *host
envValueFrom: envValueFrom:
AUTHENTIK_SECRET_KEY: AUTHENTIK_SECRET_KEY: