From a978a4a10ebc4a63d88a4adec9801142781601c0 Mon Sep 17 00:00:00 2001
From: Mayne0213 <bluemayne0213@icloud.com>
Date: Tue, 30 Dec 2025 15:24:56 +0900
Subject: [PATCH] FEAT(authentik): add authentik sso

- with traefik forwardauth
- Add Authentik helm chart and ArgoCD application
- Configure Traefik ForwardAuth middleware for SSO
- Add External Secrets for Vault integration
- Apply SSO middleware to Velero UI as test
---
 velero/ingress.yaml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/velero/ingress.yaml b/velero/ingress.yaml
index b584f23..dbe44e0 100644
--- a/velero/ingress.yaml
+++ b/velero/ingress.yaml
@@ -5,6 +5,7 @@ metadata:
   namespace: velero
   annotations:
     cert-manager.io/cluster-issuer: letsencrypt-prod
+    traefik.ingress.kubernetes.io/router.middlewares: authentik-authentik-auth@kubernetescrd
 spec:
   ingressClassName: traefik
   tls: