From 0ce250dcd149173f05b50b19f081991b6867d461 Mon Sep 17 00:00:00 2001 From: Jens Langhammer Date: Mon, 18 Dec 2023 16:54:40 +0100 Subject: [PATCH] add blueprints for apps Signed-off-by: Jens Langhammer --- blueprints/default/app-authentik-admin.yaml | 41 +++++++++++++++++++++ blueprints/default/app-authentik-user.yaml | 41 +++++++++++++++++++++ 2 files changed, 82 insertions(+) create mode 100644 blueprints/default/app-authentik-admin.yaml create mode 100644 blueprints/default/app-authentik-user.yaml diff --git a/blueprints/default/app-authentik-admin.yaml b/blueprints/default/app-authentik-admin.yaml new file mode 100644 index 000000000..009207c97 --- /dev/null +++ b/blueprints/default/app-authentik-admin.yaml @@ -0,0 +1,41 @@ +version: 1 +metadata: + name: Default - authentik Admin Interface +entries: + - model: authentik_providers_oauth2.oauth2provider + id: provider + identifiers: + name: authentik-admin-interface + attrs: + authorization_flow: + !Find [ + authentik_flows.flow, + [slug, default-provider-authorization-implicit-consent], + ] + client_type: public + client_id: authentik-admin-interface + property_mappings: + - !Find [ + authentik_providers_oauth2.scopemapping, + [managed, goauthentik.io/providers/oauth2/scope-openid], + ] + - !Find [ + authentik_providers_oauth2.scopemapping, + [managed, goauthentik.io/providers/oauth2/scope-email], + ] + - !Find [ + authentik_providers_oauth2.scopemapping, + [managed, goauthentik.io/providers/oauth2/scope-profile], + ] + signing_key: + !Find [ + authentik_crypto.certificatekeypair, + [name, authentik Self-signed Certificate], + ] + - model: authentik_core.application + identifiers: + slug: authentik-admin-interface + attrs: + name: authentik Admin interface + icon: https://goauthentik.io/img/icon.png + provider: !KeyOf provider diff --git a/blueprints/default/app-authentik-user.yaml b/blueprints/default/app-authentik-user.yaml new file mode 100644 index 000000000..1486244a9 --- /dev/null +++ b/blueprints/default/app-authentik-user.yaml @@ -0,0 +1,41 @@ +version: 1 +metadata: + name: Default - authentik User Interface +entries: + - model: authentik_providers_oauth2.oauth2provider + id: provider + identifiers: + name: authentik-user-interface + attrs: + authorization_flow: + !Find [ + authentik_flows.flow, + [slug, default-provider-authorization-implicit-consent], + ] + client_type: public + client_id: authentik-user-interface + property_mappings: + - !Find [ + authentik_providers_oauth2.scopemapping, + [managed, goauthentik.io/providers/oauth2/scope-openid], + ] + - !Find [ + authentik_providers_oauth2.scopemapping, + [managed, goauthentik.io/providers/oauth2/scope-email], + ] + - !Find [ + authentik_providers_oauth2.scopemapping, + [managed, goauthentik.io/providers/oauth2/scope-profile], + ] + signing_key: + !Find [ + authentik_crypto.certificatekeypair, + [name, authentik Self-signed Certificate], + ] + - model: authentik_core.application + identifiers: + slug: authentik-user-interface + attrs: + name: authentik User interface + icon: https://goauthentik.io/img/icon.png + provider: !KeyOf provider