Authentik Core Resources
Providers
The following providers are needed by this module:
-
authentik (2024.2.0)
-
kubernetes (2.27.0)
-
time (0.10.0)
Required Inputs
The following input variables are required:
authentik_namespace
Description: The kubernetes namespace where Authentik is deployed
Type: string
email_templates_configmap
Description: The configmap holding the email templates that Authentik will use
Type: string
media_configmap
Description: The configmap holding the static media that Authentik will use
Type: string
organization_domain
Description: The domain name of the organization for which Authentik serves as the IdP
Type: string
organization_name
Description: The name of the organization for which Authentik serves as the IdP
Type: string
Optional Inputs
The following input variables are optional (have default values):
default_groups_enabled
Description: Whether to create the default Panfactum RBAC groups
Type: bool
Default: true
extra_groups
Description: Whether to create the default Panfactum RBAC groups
Type:
map(object({
parent = optional(string)
require_webauthn = optional(bool, false)
}))
Default: {}
favicon_ico_b64
Description: A stringified ico image for displaying on the Authentik web UI (base64 encoded)
Type: string
Default: null
logo_svg_b64
Description: A stringified svg logo for displaying on the Authentik UI (base64 encoded)
Type: string
Default: null
session_duration
Description: The session duration for user logins. See https://docs.goauthentik.io/docs/flow/stages/user_login/
Type: string
Default: "hours=8;minutes=0;seconds=0"
superusers_require_webauthn
Description: True iff superusers must use webauthn MFA to authenticate
Type: bool
Default: true
Outputs
The following outputs are exported:
groups
Description: n/a
organization_name
Description: n/a
Usage
No notes