Research-Stack/4-Infrastructure/k3s-flake/manifests/authentik/helm-chart.yaml
Brandon Schneider ac4e23dc9b Expand devcontainer with full Python stack, add MCP servers (Notion/AWS), strengthen Lean theorems
- .devcontainer/Dockerfile: add PostgreSQL client libs, OpenSSL/libffi headers, gfortran/BLAS for scipy, rclone; install full Python dependency set (boto3, psycopg2-binary, fastapi, uvicorn, notion-client, httpx, pytest, numpy, scipy, etc.) in uv-managed venv; add rclone S3 gateway init script as ENTRYPOINT
- .devcontainer/devcontainer.json: switch from build to pre-built image (localhost/research
2026-05-19 01:52:14 -05:00

67 lines
1.7 KiB
YAML

apiVersion: helm.cattle.io/v1
kind: HelmChart
metadata:
name: authentik
namespace: services
spec:
chart: authentik
repo: https://helm.goauthentik.io
targetNamespace: services
version: "2024.12.0"
valuesContent: |
authentik:
secret_key:
valueFrom:
secretKeyRef:
name: authentik-secrets
key: secret-key
postgresql:
password:
valueFrom:
secretKeyRef:
name: authentik-secrets
key: postgresql-password
postgresql:
enabled: true
global:
postgresql:
auth:
existingSecret: authentik-secrets
secretKeys:
adminPasswordKey: postgresql-password
primary:
persistence:
size: 8Gi
nodeAffinity:
requiredDuringSchedulingIgnoredDuringExecution:
nodeSelectorTerms:
- matchExpressions:
- key: topology.researchstack.io/role
operator: In
values:
- core
- server
redis:
enabled: true
master:
persistence:
size: 2Gi
nodeAffinity:
requiredDuringSchedulingIgnoredDuringExecution:
nodeSelectorTerms:
- matchExpressions:
- key: topology.researchstack.io/role
operator: In
values:
- core
- server
server:
service:
type: NodePort
nodePort: 30800
worker:
service:
type: NodePort
nodePort: 30800
ingress:
enabled: false