ahmza.com/k8s-starter-pack
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add CloudNativePG for Authentik

Browse Source
This commit is contained in:
ahmza
2026-10-16 15:50:56 +00:00
parent aa1bb9d838
commit 019039126a
3 changed files with 55 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/network.md
+2 -1
View File
@@ -64,6 +64,7 @@ This dedicated service range is advertised to the MikroTik at
| Address | What | Namespace | Port(s) | URL | Source |
|---|---|---|---|---|---|
| `10.10.60.10` | Argo CD UI/API (`argocd-server`) | `argocd` | 443 | `https://10.10.60.10` | Patched to `LoadBalancer` by hand — see [`docs/05-metallb.md`](05-metallb.md) |
| `10.10.60.11` | Reserved for the Authentik LDAP Outpost used by Jellyfin | `authentik` | 636 | `ldaps://10.10.60.11:636` | Planned Authentik deployment; verify the address and TLS certificate before migrating Jellyfin |
| `10.10.60.12` | ingress-nginx (shared, routes by hostname) | `ingress-nginx` | 80, 443 | `http://10.10.60.12`, `https://10.10.60.12` | [`apps/ingress-nginx/values.yaml`](../apps/ingress-nginx/values.yaml) — see [`docs/11-ingress.md`](11-ingress.md) |
Add a row here every time you add a new app with its own dedicated
@@ -97,7 +98,7 @@ Addresses from the range above that aren't spoken for yet. Update this
alongside the table above so it's obvious at a glance what's safe to hand
to the next app.
- `10.10.60.11`, `10.10.60.13-10.10.60.250`
- `10.10.60.13-10.10.60.250`
(`whoami`'s former `10.10.60.12` was reclaimed here after that app was
removed as the docs/08 exercise — it now belongs to ingress-nginx instead.