apiVersion: v1
kind: ConfigMap
metadata:
  name: blueprint-garage-ui
  namespace: authentik
data:
  garage-ui.yaml: |
    version: 1
    metadata:
      name: Garage UI
    entries:
      - model: authentik_providers_proxy.proxyprovider
        id: garage-ui-provider
        identifiers:
          name: garage-ui
        attrs:
          authorization_flow: !Find [authentik_flows.flow, [slug, default-provider-authorization-implicit-consent]]
          invalidation_flow: !Find [authentik_flows.flow, [slug, default-provider-invalidation-flow]]
          mode: forward_single
          external_host: https://garage.whyredfire.dev
      - model: authentik_core.application
        id: garage-ui
        identifiers:
          slug: garage-ui
        attrs:
          name: Garage UI
          provider: !KeyOf garage-ui-provider
      - model: authentik_policies.policybinding
        identifiers:
          order: 0
          target: !KeyOf garage-ui
        attrs:
          group: !Find [authentik_core.group, [name, admins]]