feat(apps): Add pgweb

add-ons/authentik/blueprint-outpost.yaml

@@ -14,6 +14,11 @@ data:
           identifiers:
             path: mounted/cm-blueprint-garage-ui/garage-ui.yaml
           required: true
+      - model: authentik_blueprints.metaapplyblueprint
+        attrs:
+          identifiers:
+            path: mounted/cm-blueprint-pgweb/pgweb.yaml
+          required: true
       - model: authentik_blueprints.metaapplyblueprint
         attrs:
           identifiers:
@@ -26,4 +31,5 @@ data:
         attrs:
           providers:
             - !Find [authentik_providers_proxy.proxyprovider, [name, garage-ui]]
+            - !Find [authentik_providers_proxy.proxyprovider, [name, pgweb]]
             - !Find [authentik_providers_proxy.proxyprovider, [name, qbittorrent]]

add-ons/authentik/blueprint-pgweb.yaml

@@ -0,0 +1,33 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: blueprint-pgweb
+  namespace: authentik
+data:
+  pgweb.yaml: |
+    version: 1
+    metadata:
+      name: pgweb
+    entries:
+      - model: authentik_providers_proxy.proxyprovider
+        id: pgweb-provider
+        identifiers:
+          name: pgweb
+        attrs:
+          authorization_flow: !Find [authentik_flows.flow, [slug, default-provider-authorization-implicit-consent]]
+          invalidation_flow: !Find [authentik_flows.flow, [slug, default-provider-invalidation-flow]]
+          mode: forward_single
+          external_host: https://pgweb.whyredfire.dev
+      - model: authentik_core.application
+        id: pgweb
+        identifiers:
+          slug: pgweb
+        attrs:
+          name: pgweb
+          provider: !KeyOf pgweb-provider
+      - model: authentik_policies.policybinding
+        identifiers:
+          order: 0
+          target: !KeyOf pgweb
+        attrs:
+          group: !Find [authentik_core.group, [name, admins]]

add-ons/authentik/kustomization.yaml

@@ -7,6 +7,7 @@ resources:
   - blueprint-google-login.yaml
   - blueprint-grafana.yaml
   - blueprint-outpost.yaml
+  - blueprint-pgweb.yaml
   - blueprint-qbittorrent.yaml
   - blueprint-wireguard-admin.yaml
   - httproute.yaml

add-ons/authentik/referencegrant.yaml

@@ -8,6 +8,9 @@ spec:
     - group: gateway.networking.k8s.io
       kind: HTTPRoute
       namespace: garage
+    - group: gateway.networking.k8s.io
+      kind: HTTPRoute
+      namespace: pgweb
     - group: gateway.networking.k8s.io
       kind: HTTPRoute
       namespace: qbit