goauthentik / goauthentik/authentik

Allow Outpost configuration to overwrite tls hosts for kubernetes integration

Open
#6,066 0 comments 0 reactions 1 assignee Claimed by @smusali View on GitHub
enhancement
Dominant language
Python
Stars
25.6k
Forks
2k
Avg merge
1d 1h
Merged PRs (30d)
644

Description

**Is your feature request related to a problem? Please describe.**
Authentik Outpost with Kubernetes integration creates one TLS-Host entry for each application active in the Outpost, when using cert-manager you can create certificate requests automatically, it would be great to have the option to overwrite this behaviour with wildcard certificates. I think it would be more economical to request a couple of wildcard certificates for the outpost instead of requesting a named certificate for each application behind authentik.

**Describe the solution you'd like**
I´d like to have an additional Outpost configuration option containing a list of hosts:
```
kubernetes_ingress_tls_hosts:
- *.example.com
- example.com
- *.foo.com
- foo.com
```
This would allow cert-manager to create less letsencrypt certificates and allows excluding entries.

**Describe alternatives you've considered**
An alternative would be to manually request the certificate using cert-manager and assigning the tls-secret in authentik.

**Additional context**
Here is a quick example how many hosts are in my outpost, and this is just my small lab. :)
![image](https://github.com/goauthentik/authentik/assets/37466196/e09e7468-b1a3-4c3d-9c1a-bfc2a7974379)

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.