test authentik proxy

kubernetes/apps/production/arr/radarr/ingress.yaml

@@ -3,6 +3,15 @@ kind: Ingress
 metadata:
   name: radarr
   namespace: arr
+  annotations:
+    nginx.ingress.kubernetes.io/auth-url: |-
+       http://ak-outpost-authentik-embedded-outpost.authentik.svc.cluster.local:9000/outpost.goauthentik.io/auth/nginx
+    nginx.ingress.kubernetes.io/auth-signin: |-
+       https://radarr.local.mafyuh.dev/outpost.goauthentik.io/start?rd=$escaped_request_uri
+    nginx.ingress.kubernetes.io/auth-response-headers: |-
+       Set-Cookie,X-authentik-username,X-authentik-groups,X-authentik-email,X-authentik-name,X-authentik-uid
+    nginx.ingress.kubernetes.io/auth-snippet: |
+            proxy_set_header X-Forwarded-Host $http_host;
 spec:
   ingressClassName: nginx
   rules:

kubernetes/apps/production/nginx/helmrelease.yaml

@@ -16,5 +16,9 @@ spec:
         namespace: flux-system
   values:
     controller:
+      allowSnippetAnnotations: "true"
+      config:
+        annotations-risk-level: "Critical"
+        enable-annotation-validation: false
         service:
           type: LoadBalancer