TrueChartsClone/charts/stable/authentik/questions.yaml

658 lines
24 KiB
YAML

# Include{groups}
portals:
open:
# Include{portalLink}
questions:
# Include{global}
# Include{workload}
# Include{workloadDeployment}
# Include{replicas1}
# Include{podSpec}
# Include{containerMain}
# Include{containerBasic}
# Include{containerAdvanced}
- variable: authentik
group: App Configuration
label: Authentik Configuration
schema:
additional_attrs: true
type: dict
attrs:
- variable: credentials
label: Credentials
schema:
additional_attrs: true
type: dict
attrs:
- variable: email
label: Email
description: |
Set the default email address for the akadmin user.</br>
Only read on initial install, changing this will have no effect.
schema:
type: string
required: true
immutable: true
default: ""
- variable: password
label: Password
description: |
Set the default password for the akadmin user.</br>
Only read on initial install, changing this will have no effect.
schema:
type: string
private: true
required: true
immutable: true
default: ""
- variable: bootstrapToken
label: (Optional) Bootstrap Token
description: |
Set the bootstrap token for the authentik server.</br>
Only read on initial install, changing this will have no effect. </br>
Only set this token if you plan to use the API right after installation.
schema:
type: string
private: true
immutable: true
default: ""
- variable: general
label: General
schema:
additional_attrs: true
type: dict
attrs:
- variable: disableUpdateCheck
label: Disable Update Check
description: Disable the inbuilt update-checker
schema:
type: boolean
default: false
- variable: disableStartupAnalytics
label: Disable Startup Analytics
description: Disable startup analytics
schema:
type: boolean
default: true
- variable: allowUserChangeName
label: Allow User Change Name
description: Enable the ability for users to change their Name
schema:
type: boolean
default: true
- variable: allowUserChangeEmail
label: Allow User Change Mail
description: Enable the ability for users to change their Email address
schema:
type: boolean
default: true
- variable: allowUserChangeUsername
label: Allow User Change Username
description: Enable the ability for users to change their Usernames
schema:
type: boolean
default: true
- variable: gdprCompliance
label: GDPR Compliance
description: When enabled, all the events caused by a user will be deleted upon the user's deletion
schema:
type: boolean
default: true
- variable: overwriteDefaultBlueprints
label: Overwrite Default Blueprints
description: |
When enabled, all the default blueprints will be overwritten</br>
True: mountPath: /blueprints</br>
False: mountPath: /blueprints/custom
schema:
type: boolean
default: false
- variable: tokenLength
label: Token Length
description: Configure the length of generated tokens
schema:
type: int
min: 60
default: 128
- variable: impersonation
label: Impersonation
description: Globally enable / disable impersonation
schema:
type: boolean
default: true
- variable: avatars
label: Avatars
description: Configure how authentik should show avatars for users
schema:
type: list
default:
- gravatar
- initials
items:
- variable: avatar
label: Avatar
description: Avatar type
schema:
type: string
default: ""
required: true
- variable: footerLinks
label: Footer Links
description: This option configures the footer links on the flow executor pages
schema:
type: list
default:
- name: Authentik
href: https://goauthentik.io
items:
- variable: footerLink
label: Footer Link
schema:
additional_attrs: true
type: dict
attrs:
- variable: name
label: Name
description: Name of the link
schema:
type: string
default: ""
required: true
- variable: href
label: Href
description: URL of the link
schema:
type: string
default: ""
required: true
- variable: email
label: Email
schema:
additional_attrs: true
type: dict
attrs:
- variable: host
label: Mail Server Host
description: Sets host of mail server
schema:
type: string
default: ""
- variable: port
label: Mail Server Port
description: Sets port of mail server
schema:
type: int
default: 587
- variable: username
label: Username
description: Sets username of mail server
schema:
type: string
default: ""
- variable: password
label: Password
description: Sets password of mail server
schema:
type: string
private: true
default: ""
- variable: useTLS
label: Use TLS for authentication
description: Sets TLS for mail server authentication
schema:
type: boolean
default: true
- variable: useSSL
label: Use SSL for authentication
description: Sets SSL for mail server authentication
schema:
type: boolean
default: false
- variable: timeout
label: Timeout of authentication
description: Sets timeout for mail server authentication
schema:
type: int
default: 10
- variable: from
label: From Address
description: Email address authentik will send from
schema:
type: string
default: ""
- variable: ldap
label: LDAP
schema:
additional_attrs: true
type: dict
attrs:
- variable: tls_ciphers
label: TLS Ciphers
description: |
Allows configuration of TLS Ciphers for LDAP connections used by LDAP sources.</br>
Setting applies to all sources
schema:
type: string
default: "null"
- variable: taskTimeoutHours
label: Task Timeout Hours
description: Timeout in hours for LDAP synchronization tasks
schema:
type: int
default: 2
- variable: logging
label: Logging
schema:
additional_attrs: true
type: dict
attrs:
- variable: log_level
label: Log Level
description: Log level for the server and worker containers
schema:
type: string
default: info
enum:
- value: trace
description: trace
- value: debug
description: debug
- value: info
description: info
- value: warning
description: warning
- value: error
description: error
- variable: error_reporting
label: Error Reporting
schema:
additional_attrs: true
type: dict
attrs:
- variable: enabled
label: Enable Reporting
description: Enables error reporting
schema:
type: boolean
default: false
show_subquestions_if:
subquestions:
- variable: sendPII
label: Send Personal Data
description: Whether or not to send personal data, like usernames
schema:
type: boolean
default: false
- variable: environment
label: Environment
description: The environment tag associated with all data sent to Sentry
schema:
type: string
default: customer
- variable: sentryDSN
label: Sentry DSN
description: Sets the DSN for the Sentry API endpoint.
schema:
type: string
private: true
default: ""
- variable: geoip
label: GeoIP
schema:
additional_attrs: true
type: dict
attrs:
- variable: wipeBuiltInDb
label: Wipe Built-In GeoIP DB
description: |
Wipes the built-in GeoIP database.</br>
With this set to false, and disabled GeoIP container,</br>
It will use the built-in database.
schema:
type: boolean
show_if: [["enabled", "=", false]]
default: false
- variable: enabled
label: Enabled
description: |
Enables and configures the GeoIP container.</br>
This will deploy the GeoIP container.
schema:
type: boolean
default: false
show_subquestions_if: true
subquestions:
- variable: editionID
label: Edition ID
description: |
The edition ID of the database to download.</br>
Only one seems to be supported by Authentik.
schema:
type: string
default: GeoLite2-City
- variable: frequency
label: Frequency
description: The number of hours between geoipupdate runs.
schema:
type: int
min: 1
default: 8
- variable: accountID
label: Account ID
description: Your MaxMind account ID
schema:
type: string
private: true
required: true
default: ""
- variable: licenseKey
label: License Key
description: Your MaxMind license key
schema:
type: string
private: true
required: true
default: ""
- variable: outposts
label: Outposts
schema:
additional_attrs: true
type: dict
attrs:
- variable: proxy
label: Proxy
schema:
additional_attrs: true
type: dict
attrs:
- variable: enabled
label: Enabled
description: |
Enables and configures the Proxy container.</br>
This will deploy the Proxy container.
schema:
type: boolean
default: false
show_subquestions_if: true
subquestions:
- variable: token
label: Token
description: |
The token used to authenticate with the authentik server.
schema:
type: string
private: true
required: true
default: ""
- variable: radius
label: Radius
schema:
additional_attrs: true
type: dict
attrs:
- variable: enabled
label: Enabled
description: |
Enables and configures the Radius container.</br>
This will deploy the Radius container.
schema:
type: boolean
default: false
show_subquestions_if: true
subquestions:
- variable: token
label: Token
description: |
The token used to authenticate with the authentik server.
schema:
type: string
private: true
required: true
default: ""
- variable: ldap
label: LDAP
schema:
additional_attrs: true
type: dict
attrs:
- variable: enabled
label: Enabled
description: |
Enables and configures the LDAP container.</br>
This will deploy the LDAP container.
schema:
type: boolean
default: false
show_subquestions_if: true
subquestions:
- variable: token
label: Token
description: |
The token used to authenticate with the authentik server.
schema:
type: string
private: true
required: true
default: ""
# Include{containerConfig}
# Include{podOptions}
# Include{serviceRoot}
- variable: main
label: Main Service
description: The Primary service on which the healthcheck runs, often the webUI
schema:
additional_attrs: true
type: dict
attrs:
# Include{serviceSelectorLoadBalancer}
# Include{serviceSelectorExtras}
- variable: main
label: Main Service Port Configuration
schema:
additional_attrs: true
type: dict
attrs:
- variable: port
label: Port
description: This port exposes the container port on the service
schema:
type: int
default: 10229
required: true
- variable: proxy
label: Proxy Service
description: The Proxy service.
schema:
additional_attrs: true
type: dict
attrs:
# Include{serviceSelectorLoadBalancer}
# Include{serviceSelectorExtras}
- variable: http
label: HTTP Service Port Configuration
schema:
additional_attrs: true
type: dict
attrs:
- variable: port
label: Port
description: This port exposes the container port on the service
schema:
type: int
default: 10227
required: true
- variable: https
label: HTTPS Service Port Configuration
schema:
additional_attrs: true
type: dict
attrs:
- variable: port
label: Port
description: This port exposes the container port on the service
schema:
type: int
default: 10228
required: true
- variable: radius
label: RADIUS Service
description: The RADIUS service.
schema:
additional_attrs: true
type: dict
attrs:
# Include{serviceSelectorLoadBalancer}
# Include{serviceSelectorExtras}
- variable: radius
label: RADIUS Service Port Configuration
schema:
additional_attrs: true
type: dict
attrs:
- variable: port
label: Port
description: This port exposes the container port on the service
schema:
type: int
default: 1812
required: true
- variable: ldap
label: LDAP Service
description: The LDAP service.
schema:
additional_attrs: true
type: dict
attrs:
# Include{serviceSelectorLoadBalancer}
# Include{serviceSelectorExtras}
- variable: ldap
label: LDAP Service Port Configuration
schema:
additional_attrs: true
type: dict
attrs:
- variable: port
label: Port
description: This port exposes the container port on the service
schema:
type: int
default: 389
required: true
- variable: ldaps
label: LDAPS Service
description: The LDAPS service.
schema:
additional_attrs: true
type: dict
attrs:
# Include{serviceSelectorLoadBalancer}
# Include{serviceSelectorExtras}
- variable: ldaps
label: LDAPS Service Port Configuration
schema:
additional_attrs: true
type: dict
attrs:
- variable: port
label: Port
description: This port exposes the container port on the service
schema:
type: int
default: 636
required: true
# Include{serviceExpertRoot}
# Include{serviceExpert}
# Include{serviceList}
# Include{persistenceRoot}
- variable: media
label: App Media Storage
description: Stores the Application Media.
schema:
additional_attrs: true
type: dict
attrs:
# Include{persistenceBasic}
- variable: templates
label: App Templates Storage
description: Stores the Application Templates.
schema:
additional_attrs: true
type: dict
attrs:
# Include{persistenceBasic}
- variable: blueprints
label: App Blueprints Storage
description: Stores the Application Blueprints.
schema:
additional_attrs: true
type: dict
attrs:
# Include{persistenceBasic}
- variable: certs
label: App Certs Storage
description: Stores the Application Certs.
schema:
additional_attrs: true
type: dict
attrs:
# Include{persistenceBasic}
- variable: geoip
label: App GeoIP Storage
description: Stores the Application GeoIP.
schema:
additional_attrs: true
type: dict
attrs:
# Include{persistenceBasic}
# Include{persistenceList}
# Include{ingressRoot}
- variable: main
label: Main (HTTPS) Ingress
schema:
additional_attrs: true
type: dict
attrs:
# Include{ingressDefault}
# Include{ingressAdvanced}
- variable: proxy
label: Proxy (HTTPS) Ingress
schema:
additional_attrs: true
type: dict
attrs:
# Include{ingressDefault}
# Include{ingressAdvanced}
# Include{ingressList}
# Include{securityContextRoot}
- variable: runAsUser
label: runAsUser
description: The UserID of the user running the application
schema:
type: int
default: 1000
- variable: runAsGroup
label: runAsGroup
description: The groupID of the user running the application
schema:
type: int
default: 1000
# Include{securityContextContainer}
# Include{securityContextAdvanced}
# Include{securityContextPod}
- variable: fsGroup
label: fsGroup
description: The group that should own ALL storage.
schema:
type: int
default: 568
# Include{resources}
# Include{postgresql}
# Include{metrics}
# Include{prometheusRule}
# Include{advanced}
# Include{addons}
# Include{codeserver}
# Include{netshoot}
# Include{vpn}
# Include{documentation}