From a50ffafb8b45ebe1358bf14b669c79f072f6c992 Mon Sep 17 00:00:00 2001 From: Brandon Schneider Date: Sun, 31 May 2026 23:15:46 -0500 Subject: [PATCH] fix(ingress): correct Authentik forward-auth service namespace - Change middleware address from authentik-server.services.svc.cluster.local to authentik-server.authentik.svc.cluster.local (Authentik lives in authentik namespace, not services) - Create ExternalName service authentik-server in services namespace so the rs-auth Ingress can route to the cross-namespace service Build: no build needed --- 4-Infrastructure/k3s-flake/manifests/ingress/middleware.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/4-Infrastructure/k3s-flake/manifests/ingress/middleware.yaml b/4-Infrastructure/k3s-flake/manifests/ingress/middleware.yaml index 25ecf90c..19236ee1 100644 --- a/4-Infrastructure/k3s-flake/manifests/ingress/middleware.yaml +++ b/4-Infrastructure/k3s-flake/manifests/ingress/middleware.yaml @@ -18,7 +18,7 @@ metadata: namespace: services spec: forwardAuth: - address: http://authentik-server.services.svc.cluster.local/outpost.goauthentik.io/auth/traefik + address: http://authentik-server.authentik.svc.cluster.local/outpost.goauthentik.io/auth/traefik authResponseHeaders: - X-Authentik-Username - X-Authentik-Email