apiVersion: v1
kind: ConfigMap
metadata:
  name: blueprint-pgweb
  namespace: authentik
data:
  pgweb.yaml: |
    version: 1
    metadata:
      name: pgweb
    entries:
      - model: authentik_providers_proxy.proxyprovider
        id: pgweb-provider
        identifiers:
          name: pgweb
        attrs:
          authorization_flow: !Find [authentik_flows.flow, [slug, default-provider-authorization-implicit-consent]]
          invalidation_flow: !Find [authentik_flows.flow, [slug, default-provider-invalidation-flow]]
          mode: forward_single
          external_host: https://pgweb.whyredfire.dev
      - model: authentik_core.application
        id: pgweb
        identifiers:
          slug: pgweb
        attrs:
          name: pgweb
          provider: !KeyOf pgweb-provider
      - model: authentik_policies.policybinding
        identifiers:
          order: 0
          target: !KeyOf pgweb
        attrs:
          group: !Find [authentik_core.group, [name, admins]]