k8s/iam: add cloudnativepg postgres and vault + authentik

- PostgreSQL 3-replica HA with pgvector - Vault S3 storage backend (MinIO) - Authentik federated OIDC provider - Vault auto-unseal via postStart hook
2026-07-11 19:17:22 -07:00
parent 36aea89e47
commit 674c8f0d66
20 changed files with 3047 additions and 0 deletions
@@ -0,0 +1,8 @@
+# Copy to ~/.authentik/.env and fill in your values.
+# Port-forward Authentik first: kubectl port-forward svc/authentik-server -n iam 7000:80
+
+AUTHENTIK_BASE_URL=http://localhost:7000
+APP_SLUG=go-example
+OIDC_CLIENT_ID=go-example
+OIDC_CLIENT_SECRET=your-client-secret-here
+REDIRECT_URL=http://localhost:8080/callback