diff --git a/charts/authentik/README.md b/charts/authentik/README.md index 5b7f0e8e..5c57009d 100644 --- a/charts/authentik/README.md +++ b/charts/authentik/README.md @@ -63,6 +63,7 @@ redis: | Key | Type | Default | Description | |-----|------|---------|-------------| +| additionalObjects | list | `[]` | additional resources to deploy. Those objects are templated. | | authentik.email.from | string | `""` | Email from address, can either be in the format "foo@bar.baz" or "authentik " | | authentik.email.host | string | `""` | SMTP Server emails are sent from, fully optional | | authentik.email.password | string | `""` | SMTP credentials, when left empty, no authentication will be done | diff --git a/charts/authentik/templates/additional-objects.yaml b/charts/authentik/templates/additional-objects.yaml new file mode 100644 index 00000000..65cb7e2d --- /dev/null +++ b/charts/authentik/templates/additional-objects.yaml @@ -0,0 +1,4 @@ +{{- range .Values.additionalObjects }} +--- +{{- tpl (toYaml . ) . }} +{{- end }} diff --git a/charts/authentik/values.yaml b/charts/authentik/values.yaml index 5aab172e..bd939cf4 100644 --- a/charts/authentik/values.yaml +++ b/charts/authentik/values.yaml @@ -784,6 +784,7 @@ worker: # maxSurge: 25% # maxUnavailable: 25% + serviceAccount: # -- Create service account. Needed for managed outposts create: true @@ -795,6 +796,7 @@ serviceAccount: # disable its creation enabled: false + geoip: # -- enable GeoIP sidecars for the authentik server and worker pods enabled: false @@ -867,6 +869,7 @@ geoip: # drop: # - ALL + prometheus: rules: enabled: false @@ -881,6 +884,7 @@ prometheus: # -- PrometheusRule annotations annotations: {} + postgresql: # -- enable the Bitnami PostgreSQL chart. Refer to https://github.com/bitnami/charts/blob/main/bitnami/postgresql/ for possible values. enabled: false @@ -897,9 +901,14 @@ postgresql: # accessModes: # - ReadWriteOnce + redis: # -- enable the Bitnami Redis chart. Refer to https://github.com/bitnami/charts/blob/main/bitnami/redis/ for possible values. enabled: false architecture: standalone auth: enabled: false + + +# -- additional resources to deploy. Those objects are templated. +additionalObjects: []