Digitalboard/digitalboard.core
5
2
Fork 0
Code Pull requests Releases Packages Activity Actions

feat: add ability to provision proxy apps using blueprints

Browse source
This commit is contained in:
Bert-Jan Fikse 2026-01-14 14:05:05 +01:00
parent 3f8afa12ef
commit 438a41356a
Signed by: bert-jan
GPG key ID: C1E0AB516AC16D1A
3 changed files with 56 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

36
roles/authentik/templates/blueprints/blueprint-proxy-app.yaml.j2 Normal file
View file

@ -0,0 +1,36 @@
# yaml-language-server: $schema=https://goauthentik.io/blueprints/schema.json
version: 1
metadata:
name: "proxy-{{ item.slug }}"
labels:
blueprints.goauthentik.io/instantiate: "true"
blueprints.goauthentik.io/description: "Proxy provider + application for {{ item.slug }}"
entries:
- model: authentik_providers_proxy.proxyprovider
id: proxy-provider-{{ item.slug }}
identifiers:
name: {{ item.slug }}
attrs:
name: {{ item.slug }}
authentication_flow: !Find [authentik_flows.flow, [slug, {{ item.flows.authentication_slug | default('default-authentication-flow') }}]]
authorization_flow: !Find [authentik_flows.flow, [slug, {{ item.flows.authorization_slug | default('default-provider-authorization-implicit-consent') }}]]
invalidation_flow: !Find [authentik_flows.flow, [slug, {{ item.flows.invalidation_slug | default('default-provider-invalidation-flow') }}]]
internal_host: "{{ item.internal_host }}"
external_host: "{{ item.external_host }}"
{% if item.skip_path_regex is defined and item.skip_path_regex|length > 0 %}
skip_path_regex: |
{{ item.skip_path_regex | indent(8, true) }}
{% endif %}
- model: authentik_core.application
id: app-{{ item.slug }}
identifiers:
slug: {{ item.slug }}
attrs:
name: "{{ item.name | default(item.slug) }}"
slug: {{ item.slug }}
provider: !KeyOf proxy-provider-{{ item.slug }}