This commit includes the complete Kubernetes infrastructure deployment for NGE6: - Crossplane setup with providers (Kubernetes, Helm, Civo) - Ambassador/Emissary ingress controller with SSL termination - Cert-manager with Let's Encrypt and Gandi webhook for DNS01 challenges - ExternalDNS integration with Gandi for automatic DNS management - Keycloak authentication server with PostgreSQL - Pomerium identity-aware proxy with OIDC integration - Forgejo Git server with persistent storage and authentication - Spire/SPIFFE for secure service communication All services are deployed using Infrastructure as Code principles with Crossplane managing Kubernetes and Helm resources declaratively. 🤖 Generated with [Claude Code](https://claude.ai/code) Co-Authored-By: Claude <noreply@anthropic.com>
31 lines
589 B
YAML
31 lines
589 B
YAML
apiVersion: v2
|
|
appVersion: v0.22.0
|
|
dependencies:
|
|
- condition: redis.enabled
|
|
name: redis
|
|
repository: https://charts.bitnami.com/bitnami
|
|
version: 17.0.9
|
|
description: Pomerium is an identity-aware access proxy.
|
|
home: http://www.pomerium.com/
|
|
icon: https://www.pomerium.com/img/icon.svg
|
|
keywords:
|
|
- proxy
|
|
- access-proxy
|
|
- reverse-proxy
|
|
- sso
|
|
- openid connect
|
|
- oauth2
|
|
- authorization
|
|
- authentication
|
|
- google
|
|
- okta
|
|
- azure
|
|
- auth0
|
|
maintainers:
|
|
- email: bdd@pomerium.io
|
|
name: desimone
|
|
- name: travisgroth
|
|
name: pomerium
|
|
sources:
|
|
- https://github.com/pomerium/pomerium
|
|
version: 34.0.1
|