ab/homelab
1
0
Fork 1
Code Pull Requests Actions Packages Wiki Activity

Added Authentik TF code
All checks were successful
Check with kubeconform / lint (push) Successful in 12s
Details

Browse Source
This commit is contained in:
AB from home.homenet
2025-09-16 15:28:42 +03:00
parent b1183896f9
commit 4ffc42af97
15 changed files with 475 additions and 14 deletions
Download Patch File Download Diff File Expand all files Collapse all files

30
terraform/authentik/variables.tf
View File

@@ -19,6 +19,9 @@ variable "oauth_applications" {
authorization_flow = optional(string, null)
signing_key = optional(string, null)
outpost = optional(string, null)
create_group = optional(bool, false)
access_groups = optional(list(string), [])
scope_mappings = optional(list(string), ["openid", "profile", "email"])
}))
default = {}
}
@@ -45,6 +48,33 @@ variable "proxy_applications" {
authorization_flow = optional(string, null)
skip_path_regex = optional(string, "")
outpost = optional(string, null)
create_group = optional(bool, false)
access_groups = optional(list(string), [])
}))
default = {}
}
variable "saml_applications" {
description = "Map of SAML applications"
type = map(object({
name = string
slug = string
group = optional(string, "")
policy_engine_mode = optional(string, "all")
meta_description = optional(string, "")
meta_launch_url = optional(string, "")
meta_icon = optional(string, "")
acs_url = string
issuer = string
audience = string
sp_binding = optional(string, "post")
signing_key = optional(string, null)
property_mappings = optional(list(string), [])
name_id_mapping = optional(string, null)
assertion_valid_not_before = optional(string, "minutes=-5")
assertion_valid_not_on_or_after = optional(string, "minutes=5")
session_valid_not_on_or_after = optional(string, "minutes=86400")
authorization_flow = optional(string, null)
}))
default = {}
}