about summary refs log tree commit diff
path: root/bundles/authelia/files/kube.yaml
diff options
context:
space:
mode:
Diffstat (limited to 'bundles/authelia/files/kube.yaml')
-rw-r--r--bundles/authelia/files/kube.yaml72
1 files changed, 72 insertions, 0 deletions
diff --git a/bundles/authelia/files/kube.yaml b/bundles/authelia/files/kube.yaml
new file mode 100644
index 0000000..cda7d2c
--- /dev/null
+++ b/bundles/authelia/files/kube.yaml
@@ -0,0 +1,72 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: authelia
+data:
+  X_AUTHELIA_CONFIG: /config/configuration.yml,/config/configuration_oidc.yml
+  X_AUTHELIA_CONFIG_FILTERS: template
+  AUTHELIA_AUTHENTICATION_BACKEND_FILE_PATH: /config/users.yml
+  AUTHELIA_STORAGE_LOCAL_PATH: /data/db.sqlite3
+---
+apiVersion: v1
+kind: Pod
+metadata:
+  name: authelia
+  labels:
+    traefik.enable: true
+    traefik.http.routers.authelia.tls: true
+    traefik.http.routers.authelia.tls.certresolver: le
+    traefik.http.routers.authelia.entrypoints: http,https
+    traefik.http.routers.authelia.rule: Host(`login.gzr.im`)
+    traefik.http.routers.authelia.service: authelia
+    traefik.http.services.authelia.loadbalancer.server.port: 9091
+    # metrics
+    traefik.http.routers.authelia-metrics.entrypoints: metrics
+    traefik.http.routers.authelia-metrics.rule: Path(`/metrics/authelia`)
+    traefik.http.routers.authelia-metrics.service: authelia-metrics
+    traefik.http.routers.authelia-metrics.middlewares: replacepath-metrics
+    traefik.http.services.authelia-metrics.loadbalancer.server.port: 9959
+spec:
+  restartPolicy: Never
+  dnsPolicy: Default
+  imagePullPolicy: Always
+  containers:
+    - name: authelia
+      image: ghcr.io/authelia/authelia:4.39.4
+      envFrom:
+        - configMapRef:
+            name: authelia
+        - secretRef:
+            name: authelia
+      ports:
+        - containerPort: 9091
+          protocol: TCP
+        - containerPort: 9959
+          protocol: TCP
+      volumeMounts:
+        - name: config
+          mountPath: /config
+        - name: data
+          mountPath: /data
+        - name: notifier
+          mountPath: /notifier
+      livenessProbe: null
+      resources:
+        requests:
+          cpu: 50m
+          memory: 30Mi
+        limits:
+          cpu: 100m
+          memory: 250Mi
+
+  volumes:
+    - name: config
+      hostPath:
+        path: /var/lib/authelia/config
+        type: DirectoryOrCreate
+    - name: data
+      hostPath:
+        path: /var/lib/authelia/data
+        type: DirectoryOrCreate
+    - name: notifier # TODO
+      emptyDir: {}