From 0e9e378bdfb1fbab218acf3a9019d10272822423 Mon Sep 17 00:00:00 2001
From: Jens Langhammer <jens.langhammer@beryju.org>
Date: Fri, 5 Mar 2021 15:30:41 +0100
Subject: [PATCH] docs: update manual k8s outpost deployment

---
 .bumpversion.cfg                              |   2 +
 .../docs/outposts/manual-deploy-kubernetes.md | 171 ++++++++++--------
 2 files changed, 99 insertions(+), 74 deletions(-)

diff --git a/.bumpversion.cfg b/.bumpversion.cfg
index 8ff326d40..7d8d2069b 100644
--- a/.bumpversion.cfg
+++ b/.bumpversion.cfg
@@ -38,3 +38,5 @@ values =
 [bumpversion:file:web/src/constants.ts]
 
 [bumpversion:file:website/docs/outpusts/manual-deploy-docker-compose.md]
+
+[bumpversion:file:website/docs/outpusts/manual-deploy-kubernetes.md]
diff --git a/website/docs/outposts/manual-deploy-kubernetes.md b/website/docs/outposts/manual-deploy-kubernetes.md
index e3ee2b44b..8f164db61 100644
--- a/website/docs/outposts/manual-deploy-kubernetes.md
+++ b/website/docs/outposts/manual-deploy-kubernetes.md
@@ -10,92 +10,115 @@ Afterwards, configure the proxy provider to connect to `<service name>.<namespac
 apiVersion: v1
 kind: Secret
 metadata:
-    labels:
-        app.kubernetes.io/instance: test
-        app.kubernetes.io/managed-by: goauthentik.io
-        app.kubernetes.io/name: authentik-proxy
-        app.kubernetes.io/version: 0.10.0
-    name: authentik-outpost-api
+  labels:
+    app.kubernetes.io/instance: __OUTPOST_NAME__
+    app.kubernetes.io/managed-by: goauthentik.io
+    app.kubernetes.io/name: authentik-proxy
+    app.kubernetes.io/version: 2021.3.2
+  name: authentik-outpost-api
 stringData:
-    authentik_host: "__AUTHENTIK_URL__"
-    authentik_host_insecure: "true"
-    token: "__AUTHENTIK_TOKEN__"
+  authentik_host: "__AUTHENTIK_URL__"
+  authentik_host_insecure: "true"
+  token: "__AUTHENTIK_TOKEN__"
 type: Opaque
 ---
 apiVersion: v1
 kind: Service
 metadata:
-    labels:
-        app.kubernetes.io/instance: test
-        app.kubernetes.io/managed-by: goauthentik.io
-        app.kubernetes.io/name: authentik-proxy
-        app.kubernetes.io/version: 0.10.0
-    name: authentik-outpost
+  labels:
+    app.kubernetes.io/instance: __OUTPOST_NAME__
+    app.kubernetes.io/managed-by: goauthentik.io
+    app.kubernetes.io/name: authentik-proxy
+    app.kubernetes.io/version: 2021.3.2
+  name: authentik-outpost
 spec:
-    ports:
-        - name: http
-          port: 4180
-          protocol: TCP
-          targetPort: http
-        - name: https
-          port: 4443
-          protocol: TCP
-          targetPort: https
-    selector:
-        app.kubernetes.io/instance: test
-        app.kubernetes.io/managed-by: goauthentik.io
-        app.kubernetes.io/name: authentik-proxy
-        app.kubernetes.io/version: 0.10.0
-    type: ClusterIP
+  ports:
+    - name: http
+      port: 4180
+      protocol: TCP
+      targetPort: http
+    - name: https
+      port: 4443
+      protocol: TCP
+      targetPort: https
+  type: ClusterIP
+  selector:
+    app.kubernetes.io/managed-by: goauthentik.io
+    app.kubernetes.io/name: authentik-outpost
+    app.kubernetes.io/instance: __OUTPOST_NAME__
 ---
 apiVersion: apps/v1
 kind: Deployment
 metadata:
-    labels:
-        app.kubernetes.io/instance: test
+  labels:
+    app.kubernetes.io/instance: __OUTPOST_NAME__
+    app.kubernetes.io/managed-by: goauthentik.io
+    app.kubernetes.io/name: authentik-proxy
+    app.kubernetes.io/version: 2021.3.2
+  name: authentik-outpost
+spec:
+  selector:
+    matchLabels:
+      app.kubernetes.io/instance: __OUTPOST_NAME__
+      app.kubernetes.io/managed-by: goauthentik.io
+      app.kubernetes.io/name: authentik-proxy
+      app.kubernetes.io/version: 2021.3.2
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/instance: __OUTPOST_NAME__
         app.kubernetes.io/managed-by: goauthentik.io
         app.kubernetes.io/name: authentik-proxy
-        app.kubernetes.io/version: 0.10.0
-    name: authentik-outpost
+        app.kubernetes.io/version: 2021.3.2
+    spec:
+      containers:
+        - env:
+          - name: AUTHENTIK_HOST
+            valueFrom:
+              secretKeyRef:
+                key: authentik_host
+                name: authentik-outpost-api
+          - name: AUTHENTIK_TOKEN
+            valueFrom:
+              secretKeyRef:
+                key: token
+                name: authentik-outpost-api
+          - name: AUTHENTIK_INSECURE
+            valueFrom:
+              secretKeyRef:
+                key: authentik_host_insecure
+                name: authentik-outpost-api
+        image: beryju/authentik-proxy:2021.3.2
+        name: proxy
+        ports:
+          - containerPort: 4180
+            name: http
+            protocol: TCP
+          - containerPort: 4443
+            name: https
+            protocol: TCP
+---
+apiVersion: extensions/v1beta1
+kind: Ingress
+metadata:
+  annotations:
+    nginx.ingress.kubernetes.io/affinity: cookie
+    nginx.ingress.kubernetes.io/proxy-buffer-size: 16k
+    nginx.ingress.kubernetes.io/proxy-buffers-number: "4"
+    traefik.ingress.kubernetes.io/affinity: "true"
+  labels:
+    app.kubernetes.io/instance: __OUTPOST_NAME__
+    app.kubernetes.io/managed-by: goauthentik.io
+    app.kubernetes.io/name: authentik-proxy
+    app.kubernetes.io/version: 2021.3.2
+  name: authentik-outpost
 spec:
-    selector:
-        matchLabels:
-            app.kubernetes.io/instance: test
-            app.kubernetes.io/managed-by: goauthentik.io
-            app.kubernetes.io/name: authentik-proxy
-            app.kubernetes.io/version: 0.10.0
-    template:
-        metadata:
-            labels:
-                app.kubernetes.io/instance: test
-                app.kubernetes.io/managed-by: goauthentik.io
-                app.kubernetes.io/name: authentik-proxy
-                app.kubernetes.io/version: 0.10.0
-        spec:
-            containers:
-                - env:
-                      - name: AUTHENTIK_HOST
-                        valueFrom:
-                            secretKeyRef:
-                                key: authentik_host
-                                name: authentik-outpost-api
-                      - name: AUTHENTIK_TOKEN
-                        valueFrom:
-                            secretKeyRef:
-                                key: token
-                                name: authentik-outpost-api
-                      - name: AUTHENTIK_INSECURE
-                        valueFrom:
-                            secretKeyRef:
-                                key: authentik_host_insecure
-                                name: authentik-outpost-api
-                  image: beryju/authentik-proxy:0.10.0-stable
-                  name: proxy
-                  ports:
-                      - containerPort: 4180
-                        name: http
-                        protocol: TCP
-                      - containerPort: 4443
-                        name: https
-                        protocol: TCP
+  rules:
+  - host: __EXTERNAL_HOSTNAME__
+    http:
+      paths:
+      - backend:
+          serviceName: authentik-outpost
+          servicePort: http
+        path: /
 ```