From 8dfe9fcf959cf78d45925b3b75f711dd2006f110 Mon Sep 17 00:00:00 2001
From: andrycorr <andrycorry@gmail.com>
Date: Tue, 21 Jul 2026 16:19:37 +0300
Subject: [PATCH 1/5] add authentik-outpost helm chart

---
 charts/authentik-outpost/.helmignore          |  29 ++
 charts/authentik-outpost/CHANGELOG.md         |   1 +
 charts/authentik-outpost/Chart.yaml           |  12 +
 charts/authentik-outpost/README.md            |   1 +
 charts/authentik-outpost/README.md.gotmpl     |  11 +
 .../authentik-outpost/templates/_helpers.tpl  |  36 +++
 .../templates/deployment.yaml                 |  44 +++
 .../authentik-outpost/templates/ingress.yaml  |  43 +++
 .../authentik-outpost/templates/secret.yaml   |  11 +
 .../authentik-outpost/templates/service.yaml  |  19 ++
 charts/authentik-outpost/tests/go.mod         |  69 +++++
 charts/authentik-outpost/tests/go.sum         | 286 ++++++++++++++++++
 .../tests/golden/fixtures/default.golden.yaml |  85 ++++++
 .../tests/golden/goldenfiles.go               |  55 ++++
 .../tests/golden/unit/default_test.go         |  32 ++
 .../tests/values/default.values.yaml          |   4 +
 charts/authentik-outpost/values.yaml          |  80 +++++
 17 files changed, 818 insertions(+)
 create mode 100644 charts/authentik-outpost/.helmignore
 create mode 100644 charts/authentik-outpost/CHANGELOG.md
 create mode 100644 charts/authentik-outpost/Chart.yaml
 create mode 100644 charts/authentik-outpost/README.md
 create mode 100644 charts/authentik-outpost/README.md.gotmpl
 create mode 100644 charts/authentik-outpost/templates/_helpers.tpl
 create mode 100644 charts/authentik-outpost/templates/deployment.yaml
 create mode 100644 charts/authentik-outpost/templates/ingress.yaml
 create mode 100644 charts/authentik-outpost/templates/secret.yaml
 create mode 100644 charts/authentik-outpost/templates/service.yaml
 create mode 100644 charts/authentik-outpost/tests/go.mod
 create mode 100644 charts/authentik-outpost/tests/go.sum
 create mode 100644 charts/authentik-outpost/tests/golden/fixtures/default.golden.yaml
 create mode 100644 charts/authentik-outpost/tests/golden/goldenfiles.go
 create mode 100644 charts/authentik-outpost/tests/golden/unit/default_test.go
 create mode 100644 charts/authentik-outpost/tests/values/default.values.yaml
 create mode 100644 charts/authentik-outpost/values.yaml

diff --git a/charts/authentik-outpost/.helmignore b/charts/authentik-outpost/.helmignore
new file mode 100644
index 0000000..2051fdf
--- /dev/null
+++ b/charts/authentik-outpost/.helmignore
@@ -0,0 +1,29 @@
+# Patterns to ignore when building packages.
+# This supports shell glob matching, relative path matching, and
+# negation (prefixed with !). Only one pattern per line.
+.DS_Store
+# Common VCS dirs
+.git/
+.gitignore
+.bzr/
+.bzrignore
+.hg/
+.hgignore
+.svn/
+# Common backup files
+*.swp
+*.bak
+*.tmp
+*.orig
+*~
+# Various IDEs
+.project
+.idea/
+*.tmproj
+.vscode/
+# Changelog
+CHANGELOG.md
+# additional files
+README.md
+tests/
+*.ignore.yaml
diff --git a/charts/authentik-outpost/CHANGELOG.md b/charts/authentik-outpost/CHANGELOG.md
new file mode 100644
index 0000000..825c32f
--- /dev/null
+++ b/charts/authentik-outpost/CHANGELOG.md
@@ -0,0 +1 @@
+# Changelog
diff --git a/charts/authentik-outpost/Chart.yaml b/charts/authentik-outpost/Chart.yaml
new file mode 100644
index 0000000..cae0418
--- /dev/null
+++ b/charts/authentik-outpost/Chart.yaml
@@ -0,0 +1,12 @@
+name: authentik-outpost
+version: 0.1.0
+appVersion: "2026.2.6"
+apiVersion: v2
+description: A Helm chart for deploying a manual Authentik Proxy Outpost
+type: application
+sources:
+  - https://github.com/code-tool/helm-charts/tree/main/charts/authentik-outpost
+dependencies:
+  - name: common
+    repository: https://code-tool.github.io/helm-charts
+    version: 0.x.x
\ No newline at end of file
diff --git a/charts/authentik-outpost/README.md b/charts/authentik-outpost/README.md
new file mode 100644
index 0000000..80b1be3
--- /dev/null
+++ b/charts/authentik-outpost/README.md
@@ -0,0 +1 @@
+# Authentik Outpost
diff --git a/charts/authentik-outpost/README.md.gotmpl b/charts/authentik-outpost/README.md.gotmpl
new file mode 100644
index 0000000..aa2742d
--- /dev/null
+++ b/charts/authentik-outpost/README.md.gotmpl
@@ -0,0 +1,11 @@
+# PgBouncer Helm Chart
+
+This chart deploys a [PgBouncer](https://www.pgbouncer.org/) instance to your Kubernetes cluster via Helm.
+
+## Configuration
+
+The following table lists the configurable parameters of the PgBouncer chart and their default values.
+
+{{ template "chart.valuesSection" . }}
+
+## Example using ArgoCD
diff --git a/charts/authentik-outpost/templates/_helpers.tpl b/charts/authentik-outpost/templates/_helpers.tpl
new file mode 100644
index 0000000..43b2e3e
--- /dev/null
+++ b/charts/authentik-outpost/templates/_helpers.tpl
@@ -0,0 +1,36 @@
+{{- define "authentik-outpost.name" -}}
+{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" }}
+{{- end }}
+{{- define "authentik-outpost.fullname" -}}
+{{- if .Values.fullnameOverride }}
+{{- .Values.fullnameOverride | trunc 63 | trimSuffix "-" }}
+{{- else }}
+{{- $name := default .Chart.Name .Values.nameOverride }}
+{{- if contains $name .Release.Name }}
+{{- .Release.Name | trunc 63 | trimSuffix "-" }}
+{{- else }}
+{{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" }}
+{{- end }}
+{{- end }}
+{{- end }}
+{{- define "authentik-outpost.chart" -}}
+{{- printf "%s-%s" .Chart.Name .Chart.Version | replace "+" "_" | trunc 63 | trimSuffix "-" }}
+{{- end }}
+{{/*
+Common labels
+*/}}
+{{- define "authentik-outpost.labels" -}}
+helm.sh/chart: {{ include "authentik-outpost.chart" . }}
+{{ include "authentik-outpost.selectorLabels" . }}
+{{- if .Chart.AppVersion }}
+app.kubernetes.io/version: {{ .Chart.AppVersion | quote }}
+{{- end }}
+app.kubernetes.io/managed-by: {{ .Release.Service }}
+{{- end }}
+{{/*
+Selector labels
+*/}}
+{{- define "authentik-outpost.selectorLabels" -}}
+app.kubernetes.io/name: {{ include "authentik-outpost.name" . }}
+app.kubernetes.io/instance: {{ .Release.Name }}
+{{- end }}
\ No newline at end of file
diff --git a/charts/authentik-outpost/templates/deployment.yaml b/charts/authentik-outpost/templates/deployment.yaml
new file mode 100644
index 0000000..aed210c
--- /dev/null
+++ b/charts/authentik-outpost/templates/deployment.yaml
@@ -0,0 +1,44 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: {{ include "authentik-outpost.fullname" . }}
+  labels:
+    {{- include "authentik-outpost.labels" . | nindent 4 }}
+spec:
+  replicas: {{.Values.replicaCount }}
+  selector:
+    matchLabels:
+      {{- include "authentik-outpost.selectorLabels" . | nindent 6 }}
+  template:
+    metadata:
+      labels:
+        {{- include "authentik-outpost.selectorLabels" . | nindent 8 }}
+    spec:
+      containers:
+        - name: proxy
+          image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}"
+          imagePullPolicy: {{.Values.image.pullPolicy }}
+          ports:
+            - name: http
+              containerPort: 9000
+              protocol: TCP
+            - name: https
+              containerPort: 9443
+              protocol: TCP
+          envFrom:
+            - secretRef:
+                name: {{ include "authentik-outpost.fullname" . }}
+          resources:
+            {{- toYaml .Values.resources | nindent 12 }}
+      {{- with.Values.nodeSelector }}
+      nodeSelector:
+        {{- toYaml . | nindent 8 }}
+      {{- end }}
+      {{- with.Values.affinity }}
+      affinity:
+        {{- toYaml . | nindent 8 }}
+      {{- end }}
+      {{- with.Values.tolerations }}
+      tolerations:
+        {{- toYaml . | nindent 8 }}
+      {{- end }}
\ No newline at end of file
diff --git a/charts/authentik-outpost/templates/ingress.yaml b/charts/authentik-outpost/templates/ingress.yaml
new file mode 100644
index 0000000..0f6ffb5
--- /dev/null
+++ b/charts/authentik-outpost/templates/ingress.yaml
@@ -0,0 +1,43 @@
+{{- if .Values.ingress.enabled }}
+{{- if empty .Values.ingress.whitelistSourceRange }}
+{{- fail "whitelistSourceRange cannot be empty"}}
+{{- end }}
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: authentik-outpost
+  annotations:
+    nginx.ingress.kubernetes.io/whitelist-source-range: {{ join "," .Values.ingress.whitelistSourceRange | quote }}
+    {{- with .Values.ingress.annotations }}
+    {{- toYaml . | nindent 4 }}
+    {{- end }}
+spec:
+  ingressClassName: nginx
+  {{- with .Values.ingress.tls }}
+  tls:
+    {{- toYaml . | nindent 4 }}
+  {{- end }}
+  rules:
+    - host: {{ .Values.ingress.host }}
+      http:
+        paths:
+          - path: /outpost.goauthentik.io
+            pathType: Prefix
+            backend:
+              service:
+                name: authentik-outpost
+                port:
+                  name: http
+    {{- range .Values.ingress.extraHosts }}
+    - host: {{ . }}
+      http:
+        paths:
+          - path: /outpost.goauthentik.io
+            pathType: Prefix
+            backend:
+              service:
+                name: authentik-outpost
+                port:
+                  name: http
+    {{- end }}
+{{- end }}
\ No newline at end of file
diff --git a/charts/authentik-outpost/templates/secret.yaml b/charts/authentik-outpost/templates/secret.yaml
new file mode 100644
index 0000000..28f3cbf
--- /dev/null
+++ b/charts/authentik-outpost/templates/secret.yaml
@@ -0,0 +1,11 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  name: {{ include "authentik-outpost.fullname" . }}
+  labels:
+    {{- include "authentik-outpost.labels" . | nindent 4 }}
+type: Opaque
+data:
+  AUTHENTIK_HOST: {{ .Values.authentik.host | b64enc | quote }}
+  AUTHENTIK_TOKEN: {{ .Values.authentik.token | b64enc | quote }}
+  AUTHENTIK_INSECURE: {{.Values.authentik.insecure | toString | b64enc | quote }}
\ No newline at end of file
diff --git a/charts/authentik-outpost/templates/service.yaml b/charts/authentik-outpost/templates/service.yaml
new file mode 100644
index 0000000..6dbff66
--- /dev/null
+++ b/charts/authentik-outpost/templates/service.yaml
@@ -0,0 +1,19 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: {{ include "authentik-outpost.fullname" . }}
+  labels:
+    {{- include "authentik-outpost.labels" . | nindent 4 }}
+spec:
+  type: {{.Values.service.type }}
+  ports:
+    - port: {{.Values.service.portHttp }}
+      targetPort: http
+      protocol: TCP
+      name: http
+    - port: {{.Values.service.portHttps }}
+      targetPort: https
+      protocol: TCP
+      name: https
+  selector:
+    {{- include "authentik-outpost.selectorLabels" . | nindent 4 }}
\ No newline at end of file
diff --git a/charts/authentik-outpost/tests/go.mod b/charts/authentik-outpost/tests/go.mod
new file mode 100644
index 0000000..6419c2d
--- /dev/null
+++ b/charts/authentik-outpost/tests/go.mod
@@ -0,0 +1,69 @@
+module tests
+
+go 1.21
+
+require (
+	github.com/gruntwork-io/terratest v0.46.7
+	github.com/stretchr/testify v1.8.4
+)
+
+require (
+	github.com/aws/aws-sdk-go v1.44.122 // indirect
+	github.com/boombuler/barcode v1.0.1-0.20190219062509-6c824513bacc // indirect
+	github.com/cpuguy83/go-md2man/v2 v2.0.0 // indirect
+	github.com/davecgh/go-spew v1.1.1 // indirect
+	github.com/emicklei/go-restful/v3 v3.9.0 // indirect
+	github.com/ghodss/yaml v1.0.0 // indirect
+	github.com/go-errors/errors v1.0.2-0.20180813162953-d98b870cc4e0 // indirect
+	github.com/go-logr/logr v1.2.3 // indirect
+	github.com/go-openapi/jsonpointer v0.19.6 // indirect
+	github.com/go-openapi/jsonreference v0.20.1 // indirect
+	github.com/go-openapi/swag v0.22.3 // indirect
+	github.com/go-sql-driver/mysql v1.4.1 // indirect
+	github.com/gogo/protobuf v1.3.2 // indirect
+	github.com/golang/protobuf v1.5.3 // indirect
+	github.com/google/gnostic v0.5.7-v3refs // indirect
+	github.com/google/go-cmp v0.5.9 // indirect
+	github.com/google/gofuzz v1.1.0 // indirect
+	github.com/google/uuid v1.3.0 // indirect
+	github.com/gruntwork-io/go-commons v0.8.0 // indirect
+	github.com/hashicorp/errwrap v1.0.0 // indirect
+	github.com/hashicorp/go-multierror v1.1.0 // indirect
+	github.com/imdario/mergo v0.3.11 // indirect
+	github.com/jmespath/go-jmespath v0.4.0 // indirect
+	github.com/josharian/intern v1.0.0 // indirect
+	github.com/json-iterator/go v1.1.12 // indirect
+	github.com/mailru/easyjson v0.7.7 // indirect
+	github.com/mattn/go-zglob v0.0.2-0.20190814121620-e3c945676326 // indirect
+	github.com/mitchellh/go-homedir v1.1.0 // indirect
+	github.com/moby/spdystream v0.2.0 // indirect
+	github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd // indirect
+	github.com/modern-go/reflect2 v1.0.2 // indirect
+	github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822 // indirect
+	github.com/pmezard/go-difflib v1.0.0 // indirect
+	github.com/pquerna/otp v1.2.0 // indirect
+	github.com/russross/blackfriday/v2 v2.1.0 // indirect
+	github.com/spf13/pflag v1.0.5 // indirect
+	github.com/urfave/cli v1.22.2 // indirect
+	golang.org/x/crypto v0.14.0 // indirect
+	golang.org/x/net v0.17.0 // indirect
+	golang.org/x/oauth2 v0.7.0 // indirect
+	golang.org/x/sys v0.13.0 // indirect
+	golang.org/x/term v0.13.0 // indirect
+	golang.org/x/text v0.13.0 // indirect
+	golang.org/x/time v0.0.0-20220210224613-90d013bbcef8 // indirect
+	google.golang.org/appengine v1.6.7 // indirect
+	google.golang.org/protobuf v1.31.0 // indirect
+	gopkg.in/inf.v0 v0.9.1 // indirect
+	gopkg.in/yaml.v2 v2.4.0 // indirect
+	gopkg.in/yaml.v3 v3.0.1 // indirect
+	k8s.io/api v0.27.2 // indirect
+	k8s.io/apimachinery v0.27.2 // indirect
+	k8s.io/client-go v0.27.2 // indirect
+	k8s.io/klog/v2 v2.90.1 // indirect
+	k8s.io/kube-openapi v0.0.0-20230501164219-8b0f38b5fd1f // indirect
+	k8s.io/utils v0.0.0-20230209194617-a36077c30491 // indirect
+	sigs.k8s.io/json v0.0.0-20221116044647-bc3834ca7abd // indirect
+	sigs.k8s.io/structured-merge-diff/v4 v4.2.3 // indirect
+	sigs.k8s.io/yaml v1.3.0 // indirect
+)
diff --git a/charts/authentik-outpost/tests/go.sum b/charts/authentik-outpost/tests/go.sum
new file mode 100644
index 0000000..58a0243
--- /dev/null
+++ b/charts/authentik-outpost/tests/go.sum
@@ -0,0 +1,286 @@
+cloud.google.com/go v0.26.0/go.mod h1:aQUYkXzVsufM+DwF1aE+0xfcU+56JwCaLick0ClmMTw=
+github.com/BurntSushi/toml v0.3.1/go.mod h1:xHWCNGjB5oqiDr8zfno3MHue2Ht5sIBksp03qcyfWMU=
+github.com/armon/go-socks5 v0.0.0-20160902184237-e75332964ef5 h1:0CwZNZbxp69SHPdPJAN/hZIm0C4OItdklCFmMRWYpio=
+github.com/armon/go-socks5 v0.0.0-20160902184237-e75332964ef5/go.mod h1:wHh0iHkYZB8zMSxRWpUBQtwG5a7fFgvEO+odwuTv2gs=
+github.com/aws/aws-sdk-go v1.44.122 h1:p6mw01WBaNpbdP2xrisz5tIkcNwzj/HysobNoaAHjgo=
+github.com/aws/aws-sdk-go v1.44.122/go.mod h1:y4AeaBuwd2Lk+GepC1E9v0qOiTws0MIWAX4oIKwKHZo=
+github.com/bgentry/speakeasy v0.1.0/go.mod h1:+zsyZBPWlz7T6j88CTgSN5bM796AkVf0kBD4zp0CCIs=
+github.com/boombuler/barcode v1.0.1-0.20190219062509-6c824513bacc h1:biVzkmvwrH8WK8raXaxBx6fRVTlJILwEwQGL1I/ByEI=
+github.com/boombuler/barcode v1.0.1-0.20190219062509-6c824513bacc/go.mod h1:paBWMcWSl3LHKBqUq+rly7CNSldXjb2rDl3JlRe0mD8=
+github.com/census-instrumentation/opencensus-proto v0.2.1/go.mod h1:f6KPmirojxKA12rnyqOA5BBL4O983OfeGPqjHWSTneU=
+github.com/client9/misspell v0.3.4/go.mod h1:qj6jICC3Q7zFZvVWo7KLAzC3yx5G7kyvSDkc90ppPyw=
+github.com/cpuguy83/go-md2man/v2 v2.0.0-20190314233015-f79a8a8ca69d/go.mod h1:maD7wRr/U5Z6m/iR4s+kqSMx2CaBsrgA7czyZG/E6dU=
+github.com/cpuguy83/go-md2man/v2 v2.0.0 h1:EoUDS0afbrsXAZ9YQ9jdu/mZ2sXgT1/2yyNng4PGlyM=
+github.com/cpuguy83/go-md2man/v2 v2.0.0/go.mod h1:maD7wRr/U5Z6m/iR4s+kqSMx2CaBsrgA7czyZG/E6dU=
+github.com/creack/pty v1.1.9/go.mod h1:oKZEueFk5CKHvIhNR5MUki03XCEU+Q6VDXinZuGJ33E=
+github.com/davecgh/go-spew v1.1.0/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
+github.com/davecgh/go-spew v1.1.1 h1:vj9j/u1bqnvCEfJOwUhtlOARqs3+rkHYY13jYWTU97c=
+github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
+github.com/docopt/docopt-go v0.0.0-20180111231733-ee0de3bc6815/go.mod h1:WwZ+bS3ebgob9U8Nd0kOddGdZWjyMGR8Wziv+TBNwSE=
+github.com/emicklei/go-restful/v3 v3.9.0 h1:XwGDlfxEnQZzuopoqxwSEllNcCOM9DhhFyhFIIGKwxE=
+github.com/emicklei/go-restful/v3 v3.9.0/go.mod h1:6n3XBCmQQb25CM2LCACGz8ukIrRry+4bhvbpWn3mrbc=
+github.com/envoyproxy/go-control-plane v0.9.1-0.20191026205805-5f8ba28d4473/go.mod h1:YTl/9mNaCwkRvm6d1a2C3ymFceY/DCBVvsKhRF0iEA4=
+github.com/envoyproxy/protoc-gen-validate v0.1.0/go.mod h1:iSmxcyjqTsJpI2R4NaDN7+kN2VEUnK/pcBlmesArF7c=
+github.com/fatih/color v1.9.0/go.mod h1:eQcE1qtQxscV5RaZvpXrrb8Drkc3/DdQ+uUYCNjL+zU=
+github.com/ghodss/yaml v1.0.0 h1:wQHKEahhL6wmXdzwWG11gIVCkOv05bNOh+Rxn0yngAk=
+github.com/ghodss/yaml v1.0.0/go.mod h1:4dBDuWmgqj2HViK6kFavaiC9ZROes6MMH2rRYeMEF04=
+github.com/go-errors/errors v1.0.1/go.mod h1:f4zRHt4oKfwPJE5k8C9vpYG+aDHdBFUsgrm6/TyX73Q=
+github.com/go-errors/errors v1.0.2-0.20180813162953-d98b870cc4e0 h1:skJKxRtNmevLqnayafdLe2AsenqRupVmzZSqrvb5caU=
+github.com/go-errors/errors v1.0.2-0.20180813162953-d98b870cc4e0/go.mod h1:f4zRHt4oKfwPJE5k8C9vpYG+aDHdBFUsgrm6/TyX73Q=
+github.com/go-logr/logr v1.2.0/go.mod h1:jdQByPbusPIv2/zmleS9BjJVeZ6kBagPoEUsqbVz/1A=
+github.com/go-logr/logr v1.2.3 h1:2DntVwHkVopvECVRSlL5PSo9eG+cAkDCuckLubN+rq0=
+github.com/go-logr/logr v1.2.3/go.mod h1:jdQByPbusPIv2/zmleS9BjJVeZ6kBagPoEUsqbVz/1A=
+github.com/go-openapi/jsonpointer v0.19.6 h1:eCs3fxoIi3Wh6vtgmLTOjdhSpiqphQ+DaPn38N2ZdrE=
+github.com/go-openapi/jsonpointer v0.19.6/go.mod h1:osyAmYz/mB/C3I+WsTTSgw1ONzaLJoLCyoi6/zppojs=
+github.com/go-openapi/jsonreference v0.20.1 h1:FBLnyygC4/IZZr893oiomc9XaghoveYTrLC1F86HID8=
+github.com/go-openapi/jsonreference v0.20.1/go.mod h1:Bl1zwGIM8/wsvqjsOQLJ/SH+En5Ap4rVB5KVcIDZG2k=
+github.com/go-openapi/swag v0.22.3 h1:yMBqmnQ0gyZvEb/+KzuWZOXgllrXT4SADYbvDaXHv/g=
+github.com/go-openapi/swag v0.22.3/go.mod h1:UzaqsxGiab7freDnrUUra0MwWfN/q7tE4j+VcZ0yl14=
+github.com/go-sql-driver/mysql v1.4.1 h1:g24URVg0OFbNUTx9qqY1IRZ9D9z3iPyi5zKhQZpNwpA=
+github.com/go-sql-driver/mysql v1.4.1/go.mod h1:zAC/RDZ24gD3HViQzih4MyKcchzm+sOG5ZlKdlhCg5w=
+github.com/go-task/slim-sprig v0.0.0-20210107165309-348f09dbbbc0 h1:p104kn46Q8WdvHunIJ9dAyjPVtrBPhSr3KT2yUst43I=
+github.com/go-task/slim-sprig v0.0.0-20210107165309-348f09dbbbc0/go.mod h1:fyg7847qk6SyHyPtNmDHnmrv/HOrqktSC+C9fM+CJOE=
+github.com/gogo/protobuf v1.3.2 h1:Ov1cvc58UF3b5XjBnZv7+opcTcQFZebYjWzi34vdm4Q=
+github.com/gogo/protobuf v1.3.2/go.mod h1:P1XiOD3dCwIKUDQYPy72D8LYyHL2YPYrpS2s69NZV8Q=
+github.com/golang/glog v0.0.0-20160126235308-23def4e6c14b/go.mod h1:SBH7ygxi8pfUlaOkMMuAQtPIUF8ecWP5IEl/CR7VP2Q=
+github.com/golang/mock v1.1.1/go.mod h1:oTYuIxOrZwtPieC+H1uAHpcLFnEyAGVDL/k47Jfbm0A=
+github.com/golang/protobuf v1.2.0/go.mod h1:6lQm79b+lXiMfvg/cZm0SGofjICqVBUtrP5yJMmIC1U=
+github.com/golang/protobuf v1.3.1/go.mod h1:6lQm79b+lXiMfvg/cZm0SGofjICqVBUtrP5yJMmIC1U=
+github.com/golang/protobuf v1.3.2/go.mod h1:6lQm79b+lXiMfvg/cZm0SGofjICqVBUtrP5yJMmIC1U=
+github.com/golang/protobuf v1.4.0-rc.1/go.mod h1:ceaxUfeHdC40wWswd/P6IGgMaK3YpKi5j83Wpe3EHw8=
+github.com/golang/protobuf v1.4.0-rc.1.0.20200221234624-67d41d38c208/go.mod h1:xKAWHe0F5eneWXFV3EuXVDTCmh+JuBKY0li0aMyXATA=
+github.com/golang/protobuf v1.4.0-rc.2/go.mod h1:LlEzMj4AhA7rCAGe4KMBDvJI+AwstrUpVNzEA03Pprs=
+github.com/golang/protobuf v1.4.0-rc.4.0.20200313231945-b860323f09d0/go.mod h1:WU3c8KckQ9AFe+yFwt9sWVRKCVIyN9cPHBJSNnbL67w=
+github.com/golang/protobuf v1.4.0/go.mod h1:jodUvKwWbYaEsadDk5Fwe5c77LiNKVO9IDvqG2KuDX0=
+github.com/golang/protobuf v1.4.1/go.mod h1:U8fpvMrcmy5pZrNK1lt4xCsGvpyWQ/VVv6QDs8UjoX8=
+github.com/golang/protobuf v1.5.0/go.mod h1:FsONVRAS9T7sI+LIUmWTfcYkHO4aIWwzhcaSAoJOfIk=
+github.com/golang/protobuf v1.5.2/go.mod h1:XVQd3VNwM+JqD3oG2Ue2ip4fOMUkwXdXDdiuN0vRsmY=
+github.com/golang/protobuf v1.5.3 h1:KhyjKVUg7Usr/dYsdSqoFveMYd5ko72D+zANwlG1mmg=
+github.com/golang/protobuf v1.5.3/go.mod h1:XVQd3VNwM+JqD3oG2Ue2ip4fOMUkwXdXDdiuN0vRsmY=
+github.com/google/gnostic v0.5.7-v3refs h1:FhTMOKj2VhjpouxvWJAV1TL304uMlb9zcDqkl6cEI54=
+github.com/google/gnostic v0.5.7-v3refs/go.mod h1:73MKFl6jIHelAJNaBGFzt3SPtZULs9dYrGFt8OiIsHQ=
+github.com/google/go-cmp v0.2.0/go.mod h1:oXzfMopK8JAjlY9xF4vHSVASa0yLyX7SntLO5aqRK0M=
+github.com/google/go-cmp v0.3.0/go.mod h1:8QqcDgzrUqlUb/G2PQTWiueGozuR1884gddMywk6iLU=
+github.com/google/go-cmp v0.3.1/go.mod h1:8QqcDgzrUqlUb/G2PQTWiueGozuR1884gddMywk6iLU=
+github.com/google/go-cmp v0.4.0/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/gNBxE=
+github.com/google/go-cmp v0.5.5/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/gNBxE=
+github.com/google/go-cmp v0.5.9 h1:O2Tfq5qg4qc4AmwVlvv0oLiVAGB7enBSJ2x2DqQFi38=
+github.com/google/go-cmp v0.5.9/go.mod h1:17dUlkBOakJ0+DkrSSNjCkIjxS6bF9zb3elmeNGIjoY=
+github.com/google/gofuzz v1.0.0/go.mod h1:dBl0BpW6vV/+mYPU4Po3pmUjxk6FQPldtuIdl/M65Eg=
+github.com/google/gofuzz v1.1.0 h1:Hsa8mG0dQ46ij8Sl2AYJDUv1oA9/d6Vk+3LG99Oe02g=
+github.com/google/gofuzz v1.1.0/go.mod h1:dBl0BpW6vV/+mYPU4Po3pmUjxk6FQPldtuIdl/M65Eg=
+github.com/google/pprof v0.0.0-20210720184732-4bb14d4b1be1 h1:K6RDEckDVWvDI9JAJYCmNdQXq6neHJOYx3V6jnqNEec=
+github.com/google/pprof v0.0.0-20210720184732-4bb14d4b1be1/go.mod h1:kpwsk12EmLew5upagYY7GY0pfYCcupk39gWOCRROcvE=
+github.com/google/uuid v1.3.0 h1:t6JiXgmwXMjEs8VusXIJk2BXHsn+wx8BZdTaoZ5fu7I=
+github.com/google/uuid v1.3.0/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
+github.com/gorilla/websocket v1.4.2/go.mod h1:YR8l580nyteQvAITg2hZ9XVh4b55+EU/adAjf1fMHhE=
+github.com/gruntwork-io/go-commons v0.8.0 h1:k/yypwrPqSeYHevLlEDmvmgQzcyTwrlZGRaxEM6G0ro=
+github.com/gruntwork-io/go-commons v0.8.0/go.mod h1:gtp0yTtIBExIZp7vyIV9I0XQkVwiQZze678hvDXof78=
+github.com/gruntwork-io/terratest v0.46.7 h1:oqGPBBO87SEsvBYaA0R5xOq+Lm2Xc5dmFVfxEolfZeU=
+github.com/gruntwork-io/terratest v0.46.7/go.mod h1:6gI5MlLeyF+SLwqocA5GBzcTix+XiuxCy1BPwKuT+WM=
+github.com/hashicorp/errwrap v1.0.0 h1:hLrqtEDnRye3+sgx6z4qVLNuviH3MR5aQ0ykNJa/UYA=
+github.com/hashicorp/errwrap v1.0.0/go.mod h1:YH+1FKiLXxHSkmPseP+kNlulaMuP3n2brvKWEqk/Jc4=
+github.com/hashicorp/go-multierror v1.1.0 h1:B9UzwGQJehnUY1yNrnwREHc3fGbC2xefo8g4TbElacI=
+github.com/hashicorp/go-multierror v1.1.0/go.mod h1:spPvp8C1qA32ftKqdAHm4hHTbPw+vmowP0z+KUhOZdA=
+github.com/imdario/mergo v0.3.11 h1:3tnifQM4i+fbajXKBHXWEH+KvNHqojZ778UH75j3bGA=
+github.com/imdario/mergo v0.3.11/go.mod h1:jmQim1M+e3UYxmgPu/WyfjB3N3VflVyUjjjwH0dnCYA=
+github.com/jmespath/go-jmespath v0.4.0 h1:BEgLn5cpjn8UN1mAw4NjwDrS35OdebyEtFe+9YPoQUg=
+github.com/jmespath/go-jmespath v0.4.0/go.mod h1:T8mJZnbsbmF+m6zOOFylbeCJqk5+pHWvzYPziyZiYoo=
+github.com/jmespath/go-jmespath/internal/testify v1.5.1 h1:shLQSRRSCCPj3f2gpwzGwWFoC7ycTf1rcQZHOlsJ6N8=
+github.com/jmespath/go-jmespath/internal/testify v1.5.1/go.mod h1:L3OGu8Wl2/fWfCI6z80xFu9LTZmf1ZRjMHUOPmWr69U=
+github.com/josharian/intern v1.0.0 h1:vlS4z54oSdjm0bgjRigI+G1HpF+tI+9rE5LLzOg8HmY=
+github.com/josharian/intern v1.0.0/go.mod h1:5DoeVV0s6jJacbCEi61lwdGj/aVlrQvzHFFd8Hwg//Y=
+github.com/json-iterator/go v1.1.12 h1:PV8peI4a0ysnczrg+LtxykD8LfKY9ML6u2jnxaEnrnM=
+github.com/json-iterator/go v1.1.12/go.mod h1:e30LSqwooZae/UwlEbR2852Gd8hjQvJoHmT4TnhNGBo=
+github.com/kisielk/errcheck v1.5.0/go.mod h1:pFxgyoBC7bSaBwPgfKdkLd5X25qrDl4LWUI2bnpBCr8=
+github.com/kisielk/gotool v1.0.0/go.mod h1:XhKaO+MFFWcvkIS/tQcRk01m1F5IRFswLeQ+oQHNcck=
+github.com/konsorten/go-windows-terminal-sequences v1.0.1/go.mod h1:T0+1ngSBFLxvqU3pZ+m/2kptfBszLMUkC4ZK/EgS/cQ=
+github.com/kr/pretty v0.2.0/go.mod h1:ipq/a2n7PKx3OHsz4KJII5eveXtPO4qwEXGdVfWzfnI=
+github.com/kr/pretty v0.2.1/go.mod h1:ipq/a2n7PKx3OHsz4KJII5eveXtPO4qwEXGdVfWzfnI=
+github.com/kr/pretty v0.3.0 h1:WgNl7dwNpEZ6jJ9k1snq4pZsg7DOEN8hP9Xw0Tsjwk0=
+github.com/kr/pretty v0.3.0/go.mod h1:640gp4NfQd8pI5XOwp5fnNeVWj67G7CFk/SaSQn7NBk=
+github.com/kr/pty v1.1.1/go.mod h1:pFQYn66WHrOpPYNljwOMqo10TkYh1fy3cYio2l3bCsQ=
+github.com/kr/text v0.1.0/go.mod h1:4Jbv+DJW3UT/LiOwJeYQe1efqtUx/iVham/4vfdArNI=
+github.com/kr/text v0.2.0 h1:5Nx0Ya0ZqY2ygV366QzturHI13Jq95ApcVaJBhpS+AY=
+github.com/kr/text v0.2.0/go.mod h1:eLer722TekiGuMkidMxC/pM04lWEeraHUUmBw8l2grE=
+github.com/mailru/easyjson v0.7.7 h1:UGYAvKxe3sBsEDzO8ZeWOSlIQfWFlxbzLZe7hwFURr0=
+github.com/mailru/easyjson v0.7.7/go.mod h1:xzfreul335JAWq5oZzymOObrkdz5UnU4kGfJJLY9Nlc=
+github.com/mattn/go-colorable v0.1.4/go.mod h1:U0ppj6V5qS13XJ6of8GYAs25YV2eR4EVcfRqFIhoBtE=
+github.com/mattn/go-isatty v0.0.8/go.mod h1:Iq45c/XA43vh69/j3iqttzPXn0bhXyGjM0Hdxcsrc5s=
+github.com/mattn/go-isatty v0.0.11/go.mod h1:PhnuNfih5lzO57/f3n+odYbM4JtupLOxQOAqxQCu2WE=
+github.com/mattn/go-zglob v0.0.1/go.mod h1:9fxibJccNxU2cnpIKLRRFA7zX7qhkJIQWBb449FYHOo=
+github.com/mattn/go-zglob v0.0.2-0.20190814121620-e3c945676326 h1:ofNAzWCcyTALn2Zv40+8XitdzCgXY6e9qvXwN9W0YXg=
+github.com/mattn/go-zglob v0.0.2-0.20190814121620-e3c945676326/go.mod h1:9fxibJccNxU2cnpIKLRRFA7zX7qhkJIQWBb449FYHOo=
+github.com/mitchellh/go-homedir v1.1.0 h1:lukF9ziXFxDFPkA1vsr5zpc1XuPDn/wFntq5mG+4E0Y=
+github.com/mitchellh/go-homedir v1.1.0/go.mod h1:SfyaCUpYCn1Vlf4IUYiD9fPX4A5wJrkLzIz1N1q0pr0=
+github.com/moby/spdystream v0.2.0 h1:cjW1zVyyoiM0T7b6UoySUFqzXMoqRckQtXwGPiBhOM8=
+github.com/moby/spdystream v0.2.0/go.mod h1:f7i0iNDQJ059oMTcWxx8MA/zKFIuD/lY+0GqbN2Wy8c=
+github.com/modern-go/concurrent v0.0.0-20180228061459-e0a39a4cb421/go.mod h1:6dJC0mAP4ikYIbvyc7fijjWJddQyLn8Ig3JB5CqoB9Q=
+github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd h1:TRLaZ9cD/w8PVh93nsPXa1VrQ6jlwL5oN8l14QlcNfg=
+github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd/go.mod h1:6dJC0mAP4ikYIbvyc7fijjWJddQyLn8Ig3JB5CqoB9Q=
+github.com/modern-go/reflect2 v1.0.2 h1:xBagoLtFs94CBntxluKeaWgTMpvLxC4ur3nMaC9Gz0M=
+github.com/modern-go/reflect2 v1.0.2/go.mod h1:yWuevngMOJpCy52FWWMvUC8ws7m/LJsjYzDa0/r8luk=
+github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822 h1:C3w9PqII01/Oq1c1nUAm88MOHcQC9l5mIlSMApZMrHA=
+github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822/go.mod h1:+n7T8mK8HuQTcFwEeznm/DIxMOiR9yIdICNftLE1DvQ=
+github.com/onsi/ginkgo/v2 v2.9.1 h1:zie5Ly042PD3bsCvsSOPvRnFwyo3rKe64TJlD6nu0mk=
+github.com/onsi/ginkgo/v2 v2.9.1/go.mod h1:FEcmzVcCHl+4o9bQZVab+4dC9+j+91t2FHSzmGAPfuo=
+github.com/onsi/gomega v1.27.4 h1:Z2AnStgsdSayCMDiCU42qIz+HLqEPcgiOCXjAU/w+8E=
+github.com/onsi/gomega v1.27.4/go.mod h1:riYq/GJKh8hhoM01HN6Vmuy93AarCXCBGpvFDK3q3fQ=
+github.com/pkg/errors v0.9.1/go.mod h1:bwawxfHBFNV+L2hUp1rHADufV3IMtnDRdf1r5NINEl0=
+github.com/pmezard/go-difflib v1.0.0 h1:4DBwDE0NGyQoBHbLQYPwSUPoCMWR5BEzIk/f1lZbAQM=
+github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
+github.com/pquerna/otp v1.2.0 h1:/A3+Jn+cagqayeR3iHs/L62m5ue7710D35zl1zJ1kok=
+github.com/pquerna/otp v1.2.0/go.mod h1:dkJfzwRKNiegxyNb54X/3fLwhCynbMspSyWKnvi1AEg=
+github.com/prometheus/client_model v0.0.0-20190812154241-14fe0d1b01d4/go.mod h1:xMI15A0UPsDsEKsMN9yxemIoYk6Tm2C1GtYGdfGttqA=
+github.com/rogpeppe/go-internal v1.10.0 h1:TMyTOH3F/DB16zRVcYyreMH6GnZZrwQVAoYjRBZyWFQ=
+github.com/rogpeppe/go-internal v1.10.0/go.mod h1:UQnix2H7Ngw/k4C5ijL5+65zddjncjaFoBhdsK/akog=
+github.com/russross/blackfriday/v2 v2.0.1/go.mod h1:+Rmxgy9KzJVeS9/2gXHxylqXiyQDYRxCVz55jmeOWTM=
+github.com/russross/blackfriday/v2 v2.1.0 h1:JIOH55/0cWyOuilr9/qlrm0BSXldqnqwMsf35Ld67mk=
+github.com/russross/blackfriday/v2 v2.1.0/go.mod h1:+Rmxgy9KzJVeS9/2gXHxylqXiyQDYRxCVz55jmeOWTM=
+github.com/shurcooL/sanitized_anchor_name v1.0.0/go.mod h1:1NzhyTcUVG4SuEtjjoZeVRXNmyL/1OwPU0+IJeTBvfc=
+github.com/sirupsen/logrus v1.4.2/go.mod h1:tLMulIdttU9McNUspp0xgXVQah82FyeX6MwdIuYE2rE=
+github.com/spf13/pflag v1.0.5 h1:iy+VFUOCP1a+8yFto/drg2CJ5u0yRoB7fZw3DKv/JXA=
+github.com/spf13/pflag v1.0.5/go.mod h1:McXfInJRrz4CZXVZOBLb0bTZqETkiAhM9Iw0y3An2Bg=
+github.com/stoewer/go-strcase v1.2.0/go.mod h1:IBiWB2sKIp3wVVQ3Y035++gc+knqhUQag1KpM8ahLw8=
+github.com/stretchr/objx v0.1.0/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME=
+github.com/stretchr/objx v0.1.1/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME=
+github.com/stretchr/objx v0.4.0/go.mod h1:YvHI0jy2hoMjB+UWwv71VJQ9isScKT/TqJzVSSt89Yw=
+github.com/stretchr/objx v0.5.0/go.mod h1:Yh+to48EsGEfYuaHDzXPcE3xhTkx73EhmCGUpEOglKo=
+github.com/stretchr/testify v1.2.2/go.mod h1:a8OnRcib4nhh0OaRAV+Yts87kKdq0PP7pXfy6kDkUVs=
+github.com/stretchr/testify v1.3.0/go.mod h1:M5WIy9Dh21IEIfnGCwXGc5bZfKNJtfHm1UVUgZn+9EI=
+github.com/stretchr/testify v1.4.0/go.mod h1:j7eGeouHqKxXV5pUuKE4zz7dFj8WfuZ+81PSLYec5m4=
+github.com/stretchr/testify v1.5.1/go.mod h1:5W2xD1RspED5o8YsWQXVCued0rvSQ+mT+I5cxcmMvtA=
+github.com/stretchr/testify v1.7.1/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg=
+github.com/stretchr/testify v1.8.0/go.mod h1:yNjHg4UonilssWZ8iaSj1OCr/vHnekPRkoO+kdMU+MU=
+github.com/stretchr/testify v1.8.1/go.mod h1:w2LPCIKwWwSfY2zedu0+kehJoqGctiVI29o6fzry7u4=
+github.com/stretchr/testify v1.8.4 h1:CcVxjf3Q8PM0mHUKJCdn+eZZtm5yQwehR5yeSVQQcUk=
+github.com/stretchr/testify v1.8.4/go.mod h1:sz/lmYIOXD/1dqDmKjjqLyZ2RngseejIcXlSw2iwfAo=
+github.com/urfave/cli v1.22.2 h1:gsqYFH8bb9ekPA12kRo0hfjngWQjkJPlN9R0N78BoUo=
+github.com/urfave/cli v1.22.2/go.mod h1:Gos4lmkARVdJ6EkW0WaNv/tZAAMe9V7XWyB60NtXRu0=
+github.com/yuin/goldmark v1.1.27/go.mod h1:3hX8gzYuyVAZsxl0MRgGTJEmQBFcNTphYh9decYSb74=
+github.com/yuin/goldmark v1.2.1/go.mod h1:3hX8gzYuyVAZsxl0MRgGTJEmQBFcNTphYh9decYSb74=
+golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACkg1iLfiJU5Ep61QUkGW8qpdssI0+w=
+golang.org/x/crypto v0.0.0-20191011191535-87dc89f01550/go.mod h1:yigFU9vqHzYiE8UmvKecakEJjdnWj3jj499lnFckfCI=
+golang.org/x/crypto v0.0.0-20200622213623-75b288015ac9/go.mod h1:LzIPMQfyMNhhGPhUkYOs5KpL4U8rLKemX1yGLhDgUto=
+golang.org/x/crypto v0.14.0 h1:wBqGXzWJW6m1XrIKlAH0Hs1JJ7+9KBwnIO8v66Q9cHc=
+golang.org/x/crypto v0.14.0/go.mod h1:MVFd36DqK4CsrnJYDkBA3VC4m2GkXAM0PvzMCn4JQf4=
+golang.org/x/exp v0.0.0-20190121172915-509febef88a4/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA=
+golang.org/x/lint v0.0.0-20181026193005-c67002cb31c3/go.mod h1:UVdnD1Gm6xHRNCYTkRU2/jEulfH38KcIWyp/GAMgvoE=
+golang.org/x/lint v0.0.0-20190227174305-5b3e6a55c961/go.mod h1:wehouNa3lNwaWXcvxsM5YxQ5yQlVC4a0KAMCusXpPoU=
+golang.org/x/lint v0.0.0-20190313153728-d0100b6bd8b3/go.mod h1:6SW0HCj/g11FgYtHlgUYUwCkIfeOF89ocIRzGO/8vkc=
+golang.org/x/mod v0.2.0/go.mod h1:s0Qsj1ACt9ePp/hMypM3fl4fZqREWJwdYDEqhRiZZUA=
+golang.org/x/mod v0.3.0/go.mod h1:s0Qsj1ACt9ePp/hMypM3fl4fZqREWJwdYDEqhRiZZUA=
+golang.org/x/net v0.0.0-20180724234803-3673e40ba225/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
+golang.org/x/net v0.0.0-20180826012351-8a410e7b638d/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
+golang.org/x/net v0.0.0-20190213061140-3a22650c66bd/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
+golang.org/x/net v0.0.0-20190311183353-d8887717615a/go.mod h1:t9HGtf8HONx5eT2rtn7q6eTqICYqUVnKs3thJo3Qplg=
+golang.org/x/net v0.0.0-20190404232315-eb5bcb51f2a3/go.mod h1:t9HGtf8HONx5eT2rtn7q6eTqICYqUVnKs3thJo3Qplg=
+golang.org/x/net v0.0.0-20190603091049-60506f45cf65/go.mod h1:HSz+uSET+XFnRR8LxR5pz3Of3rY3CfYBVs4xY44aLks=
+golang.org/x/net v0.0.0-20190620200207-3b0461eec859/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
+golang.org/x/net v0.0.0-20200226121028-0de0cce0169b/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
+golang.org/x/net v0.0.0-20201021035429-f5854403a974/go.mod h1:sp8m0HH+o8qH0wwXwYZr8TS3Oi6o0r6Gce1SSxlDquU=
+golang.org/x/net v0.0.0-20220127200216-cd36cc0744dd/go.mod h1:CfG3xpIq0wQ8r1q4Su4UZFWDARRcnwPjda9FqA0JpMk=
+golang.org/x/net v0.17.0 h1:pVaXccu2ozPjCXewfr1S7xza/zcXTity9cCdXQYSjIM=
+golang.org/x/net v0.17.0/go.mod h1:NxSsAGuq816PNPmqtQdLE42eU2Fs7NoRIZrHJAlaCOE=
+golang.org/x/oauth2 v0.0.0-20180821212333-d2e6202438be/go.mod h1:N/0e6XlmueqKjAGxoOufVs8QHGRruUQn6yWY3a++T0U=
+golang.org/x/oauth2 v0.7.0 h1:qe6s0zUXlPX80/dITx3440hWZ7GwMwgDDyrSGTPJG/g=
+golang.org/x/oauth2 v0.7.0/go.mod h1:hPLQkd9LyjfXTiRohC/41GhcFqxisoUQ99sCUOHO9x4=
+golang.org/x/sync v0.0.0-20180314180146-1d60e4601c6f/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
+golang.org/x/sync v0.0.0-20181108010431-42b317875d0f/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
+golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
+golang.org/x/sync v0.0.0-20190911185100-cd5d95a43a6e/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
+golang.org/x/sync v0.0.0-20201020160332-67f06af15bc9/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
+golang.org/x/sys v0.0.0-20180830151530-49385e6e1522/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
+golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
+golang.org/x/sys v0.0.0-20190222072716-a9d3bda3a223/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
+golang.org/x/sys v0.0.0-20190412213103-97732733099d/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/sys v0.0.0-20190422165155-953cdadca894/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/sys v0.0.0-20191026070338-33540a1f6037/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/sys v0.0.0-20200930185726-fdedc70b468f/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/sys v0.0.0-20210615035016-665e8c7367d1/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
+golang.org/x/sys v0.0.0-20211216021012-1d35b9e2eb4e/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
+golang.org/x/sys v0.13.0 h1:Af8nKPmuFypiUBjVoU9V20FiaFXOcuZI21p0ycVYYGE=
+golang.org/x/sys v0.13.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
+golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
+golang.org/x/term v0.13.0 h1:bb+I9cTfFazGW51MZqBVmZy7+JEJMouUHTUSKVQLBek=
+golang.org/x/term v0.13.0/go.mod h1:LTmsnFJwVN6bCy1rVCoS+qHT1HhALEFxKncY3WNNh4U=
+golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
+golang.org/x/text v0.3.2/go.mod h1:bEr9sfX3Q8Zfm5fL9x+3itogRgK3+ptLWKqgva+5dAk=
+golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
+golang.org/x/text v0.3.7/go.mod h1:u+2+/6zg+i71rQMx5EYifcz6MCKuco9NR6JIITiCfzQ=
+golang.org/x/text v0.13.0 h1:ablQoSUd0tRdKxZewP80B+BaqeKJuVhuRxj/dkrun3k=
+golang.org/x/text v0.13.0/go.mod h1:TvPlkZtksWOMsz7fbANvkp4WM8x/WCo/om8BMLbz+aE=
+golang.org/x/time v0.0.0-20220210224613-90d013bbcef8 h1:vVKdlvoWBphwdxWKrFZEuM0kGgGLxUOYcY4U/2Vjg44=
+golang.org/x/time v0.0.0-20220210224613-90d013bbcef8/go.mod h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ=
+golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
+golang.org/x/tools v0.0.0-20190114222345-bf090417da8b/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
+golang.org/x/tools v0.0.0-20190226205152-f727befe758c/go.mod h1:9Yl7xja0Znq3iFh3HoIrodX9oNMXvdceNzlUR8zjMvY=
+golang.org/x/tools v0.0.0-20190311212946-11955173bddd/go.mod h1:LCzVGOaR6xXOjkQ3onu1FJEFr0SW1gC7cKk1uF8kGRs=
+golang.org/x/tools v0.0.0-20190524140312-2c0ae7006135/go.mod h1:RgjU9mgBXZiqYHBnxXauZ1Gv1EHHAz9KjViQ78xBX0Q=
+golang.org/x/tools v0.0.0-20191119224855-298f0cb1881e/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
+golang.org/x/tools v0.0.0-20200619180055-7c47624df98f/go.mod h1:EkVYQZoAsY45+roYkvgYkIh4xh/qjgUK9TdY2XT94GE=
+golang.org/x/tools v0.0.0-20210106214847-113979e3529a/go.mod h1:emZCQorbCU4vsT4fOWvOPXz4eW1wZW4PmDk9uLelYpA=
+golang.org/x/tools v0.7.0 h1:W4OVu8VVOaIO0yzWMNdepAulS7YfoS3Zabrm8DOXXU4=
+golang.org/x/tools v0.7.0/go.mod h1:4pg6aUX35JBAogB10C9AtvVL+qowtN4pT3CGSQex14s=
+golang.org/x/xerrors v0.0.0-20190717185122-a985d3407aa7/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
+golang.org/x/xerrors v0.0.0-20191011141410-1b5146add898/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
+golang.org/x/xerrors v0.0.0-20191204190536-9bdfabe68543/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
+golang.org/x/xerrors v0.0.0-20200804184101-5ec99f83aff1/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
+google.golang.org/appengine v1.1.0/go.mod h1:EbEs0AVv82hx2wNQdGPgUI5lhzA/G0D9YwlJXL52JkM=
+google.golang.org/appengine v1.4.0/go.mod h1:xpcJRLb0r/rnEns0DIKYYv+WjYCduHsrkT7/EB5XEv4=
+google.golang.org/appengine v1.6.7 h1:FZR1q0exgwxzPzp/aF+VccGrSfxfPpkBqjIIEq3ru6c=
+google.golang.org/appengine v1.6.7/go.mod h1:8WjMMxjGQR8xUklV/ARdw2HLXBOI7O7uCIDZVag1xfc=
+google.golang.org/genproto v0.0.0-20180817151627-c66870c02cf8/go.mod h1:JiN7NxoALGmiZfu7CAH4rXhgtRTLTxftemlI0sWmxmc=
+google.golang.org/genproto v0.0.0-20190819201941-24fa4b261c55/go.mod h1:DMBHOl98Agz4BDEuKkezgsaosCRResVns1a3J2ZsMNc=
+google.golang.org/genproto v0.0.0-20200526211855-cb27e3aa2013/go.mod h1:NbSheEEYHJ7i3ixzK3sjbqSGDJWnxyFXZblF3eUsNvo=
+google.golang.org/genproto v0.0.0-20201019141844-1ed22bb0c154/go.mod h1:FWY/as6DDZQgahTzZj3fqbO1CbirC29ZNUFHwi0/+no=
+google.golang.org/grpc v1.19.0/go.mod h1:mqu4LbDTu4XGKhr4mRzUsmM4RtVoemTSY81AxZiDr8c=
+google.golang.org/grpc v1.23.0/go.mod h1:Y5yQAOtifL1yxbo5wqy6BxZv8vAUGQwXBOALyacEbxg=
+google.golang.org/grpc v1.27.0/go.mod h1:qbnxyOmOxrQa7FizSgH+ReBfzJrCY1pSN7KXBS8abTk=
+google.golang.org/protobuf v0.0.0-20200109180630-ec00e32a8dfd/go.mod h1:DFci5gLYBciE7Vtevhsrf46CRTquxDuWsQurQQe4oz8=
+google.golang.org/protobuf v0.0.0-20200221191635-4d8936d0db64/go.mod h1:kwYJMbMJ01Woi6D6+Kah6886xMZcty6N08ah7+eCXa0=
+google.golang.org/protobuf v0.0.0-20200228230310-ab0ca4ff8a60/go.mod h1:cfTl7dwQJ+fmap5saPgwCLgHXTUD7jkjRqWcaiX5VyM=
+google.golang.org/protobuf v1.20.1-0.20200309200217-e05f789c0967/go.mod h1:A+miEFZTKqfCUM6K7xSMQL9OKL/b6hQv+e19PK+JZNE=
+google.golang.org/protobuf v1.21.0/go.mod h1:47Nbq4nVaFHyn7ilMalzfO3qCViNmqZ2kzikPIcrTAo=
+google.golang.org/protobuf v1.22.0/go.mod h1:EGpADcykh3NcUnDUJcl1+ZksZNG86OlYog2l/sGQquU=
+google.golang.org/protobuf v1.23.1-0.20200526195155-81db48ad09cc/go.mod h1:EGpADcykh3NcUnDUJcl1+ZksZNG86OlYog2l/sGQquU=
+google.golang.org/protobuf v1.24.0/go.mod h1:r/3tXBNzIEhYS9I1OUVjXDlt8tc493IdKGjtUeSXeh4=
+google.golang.org/protobuf v1.26.0-rc.1/go.mod h1:jlhhOSvTdKEhbULTjvd4ARK9grFBp09yW+WbY/TyQbw=
+google.golang.org/protobuf v1.26.0/go.mod h1:9q0QmTI4eRPtz6boOQmLYwt+qCgq0jsYwAQnmE0givc=
+google.golang.org/protobuf v1.31.0 h1:g0LDEJHgrBl9N9r17Ru3sqWhkIx2NB67okBHPwC7hs8=
+google.golang.org/protobuf v1.31.0/go.mod h1:HV8QOd/L58Z+nl8r43ehVNZIU/HEI6OcFqwMG9pJV4I=
+gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
+gopkg.in/check.v1 v1.0.0-20190902080502-41f04d3bba15/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
+gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c h1:Hei/4ADfdWqJk1ZMxUNpqntNwaWcugrBjAiHlqqRiVk=
+gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c/go.mod h1:JHkPIbrfpd72SG/EVd6muEfDQjcINNoR0C8j2r3qZ4Q=
+gopkg.in/inf.v0 v0.9.1 h1:73M5CoZyi3ZLMOyDlQh031Cx6N9NDJ2Vvfl76EDAgDc=
+gopkg.in/inf.v0 v0.9.1/go.mod h1:cWUDdTG/fYaXco+Dcufb5Vnc6Gp2YChqWtbxRZE0mXw=
+gopkg.in/yaml.v2 v2.2.2/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=
+gopkg.in/yaml.v2 v2.2.8/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=
+gopkg.in/yaml.v2 v2.3.0/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=
+gopkg.in/yaml.v2 v2.4.0 h1:D8xgwECY7CYvx+Y2n4sBz93Jn9JRvxdiyyo8CTfuKaY=
+gopkg.in/yaml.v2 v2.4.0/go.mod h1:RDklbk79AGWmwhnvt/jBztapEOGDOx6ZbXqjP6csGnQ=
+gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
+gopkg.in/yaml.v3 v3.0.0-20200615113413-eeeca48fe776/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
+gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA=
+gopkg.in/yaml.v3 v3.0.1/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
+honnef.co/go/tools v0.0.0-20190102054323-c2f93a96b099/go.mod h1:rf3lG4BRIbNafJWhAfAdb/ePZxsR/4RtNHQocxwk9r4=
+honnef.co/go/tools v0.0.0-20190523083050-ea95bdfd59fc/go.mod h1:rf3lG4BRIbNafJWhAfAdb/ePZxsR/4RtNHQocxwk9r4=
+k8s.io/api v0.27.2 h1:+H17AJpUMvl+clT+BPnKf0E3ksMAzoBBg7CntpSuADo=
+k8s.io/api v0.27.2/go.mod h1:ENmbocXfBT2ADujUXcBhHV55RIT31IIEvkntP6vZKS4=
+k8s.io/apimachinery v0.27.2 h1:vBjGaKKieaIreI+oQwELalVG4d8f3YAMNpWLzDXkxeg=
+k8s.io/apimachinery v0.27.2/go.mod h1:XNfZ6xklnMCOGGFNqXG7bUrQCoR04dh/E7FprV6pb+E=
+k8s.io/client-go v0.27.2 h1:vDLSeuYvCHKeoQRhCXjxXO45nHVv2Ip4Fe0MfioMrhE=
+k8s.io/client-go v0.27.2/go.mod h1:tY0gVmUsHrAmjzHX9zs7eCjxcBsf8IiNe7KQ52biTcQ=
+k8s.io/klog/v2 v2.90.1 h1:m4bYOKall2MmOiRaR1J+We67Do7vm9KiQVlT96lnHUw=
+k8s.io/klog/v2 v2.90.1/go.mod h1:y1WjHnz7Dj687irZUWR/WLkLc5N1YHtjLdmgWjndZn0=
+k8s.io/kube-openapi v0.0.0-20230501164219-8b0f38b5fd1f h1:2kWPakN3i/k81b0gvD5C5FJ2kxm1WrQFanWchyKuqGg=
+k8s.io/kube-openapi v0.0.0-20230501164219-8b0f38b5fd1f/go.mod h1:byini6yhqGC14c3ebc/QwanvYwhuMWF6yz2F8uwW8eg=
+k8s.io/utils v0.0.0-20230209194617-a36077c30491 h1:r0BAOLElQnnFhE/ApUsg3iHdVYYPBjNSSOMowRZxxsY=
+k8s.io/utils v0.0.0-20230209194617-a36077c30491/go.mod h1:OLgZIPagt7ERELqWJFomSt595RzquPNLL48iOWgYOg0=
+sigs.k8s.io/json v0.0.0-20221116044647-bc3834ca7abd h1:EDPBXCAspyGV4jQlpZSudPeMmr1bNJefnuqLsRAsHZo=
+sigs.k8s.io/json v0.0.0-20221116044647-bc3834ca7abd/go.mod h1:B8JuhiUyNFVKdsE8h686QcCxMaH6HrOAZj4vswFpcB0=
+sigs.k8s.io/structured-merge-diff/v4 v4.2.3 h1:PRbqxJClWWYMNV1dhaG4NsibJbArud9kFxnAMREiWFE=
+sigs.k8s.io/structured-merge-diff/v4 v4.2.3/go.mod h1:qjx8mGObPmV2aSZepjQjbmb2ihdVs8cGKBraizNC69E=
+sigs.k8s.io/yaml v1.3.0 h1:a2VclLzOGrwOHDiV8EfBGhvjHvP46CtW5j6POvhYGGo=
+sigs.k8s.io/yaml v1.3.0/go.mod h1:GeOyir5tyXNByN85N/dRIT9es5UQNerPYEKK56eTBm8=
diff --git a/charts/authentik-outpost/tests/golden/fixtures/default.golden.yaml b/charts/authentik-outpost/tests/golden/fixtures/default.golden.yaml
new file mode 100644
index 0000000..d9e71de
--- /dev/null
+++ b/charts/authentik-outpost/tests/golden/fixtures/default.golden.yaml
@@ -0,0 +1,85 @@
+---
+# Source: authentik-outpost/templates/deployment.yaml
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: golden-file-test-authentik-outpost
+  labels:
+    app.kubernetes.io/name: authentik-outpost
+    app.kubernetes.io/instance: golden-file-test
+    app.kubernetes.io/version: "2026.2.6"
+    app.kubernetes.io/managed-by: Helm
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app.kubernetes.io/name: authentik-outpost
+      app.kubernetes.io/instance: golden-file-test
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/name: authentik-outpost
+        app.kubernetes.io/instance: golden-file-test
+    spec:
+      containers:
+        - name: proxy
+          image: "ghcr.io/goauthentik/proxy:2026.2.6"
+          imagePullPolicy: IfNotPresent
+          ports:
+            - name: http
+              containerPort: 9000
+              protocol: TCP
+            - name: https
+              containerPort: 9443
+              protocol: TCP
+          envFrom:
+            - secretRef:
+                name: golden-file-test-authentik-outpost
+          resources:
+            limits:
+              cpu: 100m
+              memory: 128Mi
+            requests:
+              cpu: 50m
+              memory: 64Mi
+---
+# Source: authentik-outpost/templates/secret.yaml
+apiVersion: v1
+kind: Secret
+metadata:
+  name: golden-file-test-authentik-outpost
+  labels:
+    app.kubernetes.io/name: authentik-outpost
+    app.kubernetes.io/instance: golden-file-test
+    app.kubernetes.io/version: "2026.2.6"
+    app.kubernetes.io/managed-by: Helm
+type: Opaque
+data:
+  AUTHENTIK_HOST: "aHR0cHM6Ly9hdXRoZW50aWsudGVzdC5jb20="
+  AUTHENTIK_TOKEN: "dG9rZW4="
+  AUTHENTIK_INSECURE: "ZmFsc2U="
+---
+# Source: authentik-outpost/templates/service.yaml
+apiVersion: v1
+kind: Service
+metadata:
+  name: golden-file-test-authentik-outpost
+  labels:
+    app.kubernetes.io/name: authentik-outpost
+    app.kubernetes.io/instance: golden-file-test
+    app.kubernetes.io/version: "2026.2.6"
+    app.kubernetes.io/managed-by: Helm
+spec:
+  type: ClusterIP
+  ports:
+    - port: 9000
+      targetPort: http
+      protocol: TCP
+      name: http
+    - port: 9443
+      targetPort: https
+      protocol: TCP
+      name: https
+  selector:
+    app.kubernetes.io/name: authentik-outpost
+    app.kubernetes.io/instance: golden-file-test
\ No newline at end of file
diff --git a/charts/authentik-outpost/tests/golden/goldenfiles.go b/charts/authentik-outpost/tests/golden/goldenfiles.go
new file mode 100644
index 0000000..d5ad463
--- /dev/null
+++ b/charts/authentik-outpost/tests/golden/goldenfiles.go
@@ -0,0 +1,55 @@
+package golden
+
+import (
+	"flag"
+	"os"
+	"regexp"
+
+	"github.com/gruntwork-io/terratest/modules/helm"
+	"github.com/gruntwork-io/terratest/modules/k8s"
+	"github.com/stretchr/testify/suite"
+)
+
+var update = flag.Bool("update-golden", true, "update golden test output files")
+
+type TemplateGoldenTest struct {
+	suite.Suite
+	ChartPath      string
+	Release        string
+	Namespace      string
+	GoldenFileName string
+	Templates      []string
+	IgnoredLines   []string
+	ValuesFiles    []string
+	SetValues      map[string]string
+}
+
+func (s *TemplateGoldenTest) TestContainerGoldenTestDefaults() {
+	options := &helm.Options{
+		KubectlOptions: k8s.NewKubectlOptions("", "", s.Namespace),
+		SetValues:      s.SetValues,
+		ValuesFiles:    s.ValuesFiles,
+	}
+	output := helm.RenderTemplate(s.T(), options, s.ChartPath, s.Release, s.Templates)
+
+	s.IgnoredLines = append(s.IgnoredLines, `\s+helm.sh/chart:\s+.*`)
+	bytes := []byte(output)
+	for _, ignoredLine := range s.IgnoredLines {
+		regex := regexp.MustCompile(ignoredLine)
+		bytes = regex.ReplaceAll(bytes, []byte(""))
+	}
+	output = string(bytes)
+
+	goldenFile := "../fixtures/" + s.GoldenFileName + ".golden.yaml"
+
+	if *update {
+		err := os.WriteFile(goldenFile, bytes, 0644)
+		s.Require().NoError(err, "Golden file was not writable")
+	}
+
+	expected, err := os.ReadFile(goldenFile)
+
+	// then
+	s.Require().NoError(err, "Golden file doesn't exist or was not readable")
+	s.Require().Equal(string(expected), output)
+}
diff --git a/charts/authentik-outpost/tests/golden/unit/default_test.go b/charts/authentik-outpost/tests/golden/unit/default_test.go
new file mode 100644
index 0000000..5f2ea5a
--- /dev/null
+++ b/charts/authentik-outpost/tests/golden/unit/default_test.go
@@ -0,0 +1,32 @@
+package golden
+
+import (
+	"path/filepath"
+	"testing"
+	"tests/golden"
+
+	"github.com/stretchr/testify/require"
+	"github.com/stretchr/testify/suite"
+)
+
+func TestGoldenDefault(t *testing.T) {
+	t.Parallel()
+
+	chartPath, err := filepath.Abs("../../..")
+	require.NoError(t, err)
+
+	suite.Run(t, &golden.TemplateGoldenTest{
+		ChartPath:      chartPath,
+		Release:        "golden-file-test",
+		Namespace:      "test-namespace",
+		GoldenFileName: "default",
+		Templates: []string{
+			"templates/deployment.yaml",
+			"templates/secret.yaml",
+			"templates/service.yaml",
+		},
+		ValuesFiles: []string{
+			"../../values/default.values.yaml",
+		},
+	})
+}
\ No newline at end of file
diff --git a/charts/authentik-outpost/tests/values/default.values.yaml b/charts/authentik-outpost/tests/values/default.values.yaml
new file mode 100644
index 0000000..caae280
--- /dev/null
+++ b/charts/authentik-outpost/tests/values/default.values.yaml
@@ -0,0 +1,4 @@
+authentik:
+  host: "https://authentik.test.com"
+  token: "token"
+  insecure: false
\ No newline at end of file
diff --git a/charts/authentik-outpost/values.yaml b/charts/authentik-outpost/values.yaml
new file mode 100644
index 0000000..bfbf358
--- /dev/null
+++ b/charts/authentik-outpost/values.yaml
@@ -0,0 +1,80 @@
+# -- Override the name of the chart.
+nameOverride: ""
+# -- Override the full name of the release.
+fullnameOverride: ""
+
+# -- Number of outpost pods to deploy.
+replicaCount: 1
+
+image:
+  # -- The container image repository for the Authentik proxy outpost.
+  repository: "ghcr.io/goauthentik/proxy"
+  # -- The image pull policy.
+  pullPolicy: IfNotPresent
+  # -- The container image tag. Overrides the chart's appVersion if set.
+  tag: "2026.2.6"
+
+authentik:
+  # -- The full external URL of the Authentik core server (e.g., "https://auth.domain1.com").
+  # This value is required.
+  host: ""
+  # -- The API token for the outpost, generated from the Authentik UI.
+  # This value is required.
+  token: ""
+  # -- If true, disables TLS certificate verification for the connection to Authentik.
+  # Should only be used for testing or with self-signed certificates.
+  insecure: false
+
+service:
+  # -- The type of Kubernetes service to create for the outpost.
+  type: ClusterIP
+  # -- The HTTP port for the service.
+  portHttp: 9000
+  # -- The HTTPS port for the service.
+  portHttps: 9443
+
+# -- Resource requests and limits for the outpost pod.
+# It is recommended to adjust these values based on observed performance.
+resources:
+  limits:
+    cpu: 100m
+    memory: 128Mi
+  requests:
+    cpu: 50m
+    memory: 64Mi
+
+# -- Node selector for pod assignment.
+nodeSelector: {}
+
+# -- Tolerations for pod assignment.
+tolerations: []
+
+# -- Affinity rules for pod assignment.
+affinity: {}
+
+ingress:
+# -- Enable ingress for the outpost
+  enabled: false
+
+# -- Primary hostname for the outpost (e.g. outpost.domain.com)
+  host: ""
+
+# -- IP ranges allowed to access the outpost endpoint
+  whitelistSourceRange: []
+
+# -- Additional ingress annotations
+  annotations: {}
+
+# -- List of additional hostnames for applications protected by this outpost
+# Each application's domain must be added here so nginx can route auth requests correctly
+  extraHosts: []
+#     - app1.domain.com
+#     - app2.domain.com
+
+# -- TLS configuration for the ingress
+# Example:
+  tls: []
+#   tls:
+#   - secretName: my-tls-secret
+#     hosts:
+#       - outpost.domain.com
\ No newline at end of file

From 004e9883e466ac40860279a80c171519e4809b31 Mon Sep 17 00:00:00 2001
From: andrycorr <andrycorry@gmail.com>
Date: Tue, 21 Jul 2026 16:23:46 +0300
Subject: [PATCH 2/5] Change README

---
 charts/authentik-outpost/README.md.gotmpl | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/charts/authentik-outpost/README.md.gotmpl b/charts/authentik-outpost/README.md.gotmpl
index aa2742d..8937cbf 100644
--- a/charts/authentik-outpost/README.md.gotmpl
+++ b/charts/authentik-outpost/README.md.gotmpl
@@ -1,10 +1,10 @@
-# PgBouncer Helm Chart
+# AuthentikOutpost Helm Chart
 
-This chart deploys a [PgBouncer](https://www.pgbouncer.org/) instance to your Kubernetes cluster via Helm.
+This chart deploys a [AuthentikOutpost](https://docs.goauthentik.io/add-secure-apps/outposts/) instance to your Kubernetes cluster via Helm.
 
 ## Configuration
 
-The following table lists the configurable parameters of the PgBouncer chart and their default values.
+The following table lists the configurable parameters of the AuthentikOutpost chart and their default values.
 
 {{ template "chart.valuesSection" . }}
 

From 79053e2b42e83cb026e2b50b8baf7014b54c1756 Mon Sep 17 00:00:00 2001
From: andrycorr <andrycorry@gmail.com>
Date: Mon, 27 Jul 2026 10:44:03 +0300
Subject: [PATCH 3/5] fix image tag

---
 charts/authentik-outpost/templates/deployment.yaml | 2 +-
 charts/authentik-outpost/values.yaml               | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/charts/authentik-outpost/templates/deployment.yaml b/charts/authentik-outpost/templates/deployment.yaml
index aed210c..478d3b7 100644
--- a/charts/authentik-outpost/templates/deployment.yaml
+++ b/charts/authentik-outpost/templates/deployment.yaml
@@ -16,7 +16,7 @@ spec:
     spec:
       containers:
         - name: proxy
-          image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}"
+          image: "{{ .Values.image.repository }}:{{ .Values.image.tag | default .Chart.AppVersion }}"
           imagePullPolicy: {{.Values.image.pullPolicy }}
           ports:
             - name: http
diff --git a/charts/authentik-outpost/values.yaml b/charts/authentik-outpost/values.yaml
index bfbf358..6126d16 100644
--- a/charts/authentik-outpost/values.yaml
+++ b/charts/authentik-outpost/values.yaml
@@ -12,7 +12,7 @@ image:
   # -- The image pull policy.
   pullPolicy: IfNotPresent
   # -- The container image tag. Overrides the chart's appVersion if set.
-  tag: "2026.2.6"
+  tag: ""
 
 authentik:
   # -- The full external URL of the Authentik core server (e.g., "https://auth.domain1.com").

From 35f23cf540842c863ee7b76649cc3e8d8d50807b Mon Sep 17 00:00:00 2001
From: andrycorr <andrycorry@gmail.com>
Date: Mon, 27 Jul 2026 17:18:19 +0300
Subject: [PATCH 4/5] use common helpers, add probes, fix ingress service name,
 add existingSecretName

---
 charts/authentik-outpost/README.md.gotmpl     | 26 ++++++++++----
 .../authentik-outpost/templates/_helpers.tpl  | 36 -------------------
 .../templates/deployment.yaml                 | 14 +++++---
 .../authentik-outpost/templates/ingress.yaml  |  5 ++-
 .../authentik-outpost/templates/secret.yaml   |  8 +++--
 .../authentik-outpost/templates/service.yaml  |  6 ++--
 .../tests/golden/fixtures/default.golden.yaml | 18 ++++++++--
 .../tests/golden/goldenfiles.go               |  2 +-
 charts/authentik-outpost/values.yaml          | 23 ++++++++++++
 9 files changed, 80 insertions(+), 58 deletions(-)
 delete mode 100644 charts/authentik-outpost/templates/_helpers.tpl

diff --git a/charts/authentik-outpost/README.md.gotmpl b/charts/authentik-outpost/README.md.gotmpl
index 8937cbf..d8b9500 100644
--- a/charts/authentik-outpost/README.md.gotmpl
+++ b/charts/authentik-outpost/README.md.gotmpl
@@ -1,11 +1,25 @@
-# AuthentikOutpost Helm Chart
+# Authentik Outpost Helm Chart
 
-This chart deploys a [AuthentikOutpost](https://docs.goauthentik.io/add-secure-apps/outposts/) instance to your Kubernetes cluster via Helm.
+This chart deploys a [manual Authentik Proxy Outpost](https://docs.goauthentik.io/add-secure-apps/outposts/) to your Kubernetes cluster.
 
-## Configuration
+## Prerequisites
+
+- A running [Authentik](https://goauthentik.io) instance
+- An Authentik Outpost token (generated from the Authentik UI under System → Outposts)
+
+## Installation
 
-The following table lists the configurable parameters of the AuthentikOutpost chart and their default values.
+```bash
+helm repo add code-tool https://code-tool.github.io/helm-charts
+helm repo update
+
+helm install authentik-outpost code-tool/authentik-outpost \
+  --set authentik.host=https://accounts.example.com \
+  --set authentik.token=your-outpost-token
+```
+
+## Configuration
 
-{{ template "chart.valuesSection" . }}
+The following table lists the configurable parameters of the chart and their default values.
 
-## Example using ArgoCD
+{{ template "chart.valuesSection" . }}
\ No newline at end of file
diff --git a/charts/authentik-outpost/templates/_helpers.tpl b/charts/authentik-outpost/templates/_helpers.tpl
deleted file mode 100644
index 43b2e3e..0000000
--- a/charts/authentik-outpost/templates/_helpers.tpl
+++ /dev/null
@@ -1,36 +0,0 @@
-{{- define "authentik-outpost.name" -}}
-{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" }}
-{{- end }}
-{{- define "authentik-outpost.fullname" -}}
-{{- if .Values.fullnameOverride }}
-{{- .Values.fullnameOverride | trunc 63 | trimSuffix "-" }}
-{{- else }}
-{{- $name := default .Chart.Name .Values.nameOverride }}
-{{- if contains $name .Release.Name }}
-{{- .Release.Name | trunc 63 | trimSuffix "-" }}
-{{- else }}
-{{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" }}
-{{- end }}
-{{- end }}
-{{- end }}
-{{- define "authentik-outpost.chart" -}}
-{{- printf "%s-%s" .Chart.Name .Chart.Version | replace "+" "_" | trunc 63 | trimSuffix "-" }}
-{{- end }}
-{{/*
-Common labels
-*/}}
-{{- define "authentik-outpost.labels" -}}
-helm.sh/chart: {{ include "authentik-outpost.chart" . }}
-{{ include "authentik-outpost.selectorLabels" . }}
-{{- if .Chart.AppVersion }}
-app.kubernetes.io/version: {{ .Chart.AppVersion | quote }}
-{{- end }}
-app.kubernetes.io/managed-by: {{ .Release.Service }}
-{{- end }}
-{{/*
-Selector labels
-*/}}
-{{- define "authentik-outpost.selectorLabels" -}}
-app.kubernetes.io/name: {{ include "authentik-outpost.name" . }}
-app.kubernetes.io/instance: {{ .Release.Name }}
-{{- end }}
\ No newline at end of file
diff --git a/charts/authentik-outpost/templates/deployment.yaml b/charts/authentik-outpost/templates/deployment.yaml
index 478d3b7..dd3ec35 100644
--- a/charts/authentik-outpost/templates/deployment.yaml
+++ b/charts/authentik-outpost/templates/deployment.yaml
@@ -1,18 +1,18 @@
 apiVersion: apps/v1
 kind: Deployment
 metadata:
-  name: {{ include "authentik-outpost.fullname" . }}
+  name: {{ include "common.names.fullname" . }}
   labels:
-    {{- include "authentik-outpost.labels" . | nindent 4 }}
+    {{- include "common.labels.standard" . | nindent 4 }}
 spec:
   replicas: {{.Values.replicaCount }}
   selector:
     matchLabels:
-      {{- include "authentik-outpost.selectorLabels" . | nindent 6 }}
+      {{- include "common.labels.matchLabels" . | nindent 6 }}
   template:
     metadata:
       labels:
-        {{- include "authentik-outpost.selectorLabels" . | nindent 8 }}
+        {{- include "common.labels.matchLabels" . | nindent 8 }}
     spec:
       containers:
         - name: proxy
@@ -27,7 +27,11 @@ spec:
               protocol: TCP
           envFrom:
             - secretRef:
-                name: {{ include "authentik-outpost.fullname" . }}
+                name: {{ .Values.authentik.existingSecretName | default (include "common.names.fullname" .) }}
+          livenessProbe:  
+            {{- toYaml .Values.livenessProbe | nindent 12 }}
+          readinessProbe:
+            {{- toYaml .Values.readinessProbe | nindent 12 }}
           resources:
             {{- toYaml .Values.resources | nindent 12 }}
       {{- with.Values.nodeSelector }}
diff --git a/charts/authentik-outpost/templates/ingress.yaml b/charts/authentik-outpost/templates/ingress.yaml
index 0f6ffb5..b2827ca 100644
--- a/charts/authentik-outpost/templates/ingress.yaml
+++ b/charts/authentik-outpost/templates/ingress.yaml
@@ -2,10 +2,13 @@
 {{- if empty .Values.ingress.whitelistSourceRange }}
 {{- fail "whitelistSourceRange cannot be empty"}}
 {{- end }}
+{{- if empty .Values.ingress.host }}
+{{- fail "ingress.host cannot be empty when ingress is enabled" }}
+{{- end }}
 apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
-  name: authentik-outpost
+  name: {{ include "common.names.fullname" . }}
   annotations:
     nginx.ingress.kubernetes.io/whitelist-source-range: {{ join "," .Values.ingress.whitelistSourceRange | quote }}
     {{- with .Values.ingress.annotations }}
diff --git a/charts/authentik-outpost/templates/secret.yaml b/charts/authentik-outpost/templates/secret.yaml
index 28f3cbf..5195c5f 100644
--- a/charts/authentik-outpost/templates/secret.yaml
+++ b/charts/authentik-outpost/templates/secret.yaml
@@ -1,11 +1,13 @@
+{{- if not .Values.authentik.existingSecretName }}
 apiVersion: v1
 kind: Secret
 metadata:
-  name: {{ include "authentik-outpost.fullname" . }}
+  name: {{ include "common.names.fullname" . }}
   labels:
-    {{- include "authentik-outpost.labels" . | nindent 4 }}
+    {{- include "common.labels.standard" . | nindent 4 }}
 type: Opaque
 data:
   AUTHENTIK_HOST: {{ .Values.authentik.host | b64enc | quote }}
   AUTHENTIK_TOKEN: {{ .Values.authentik.token | b64enc | quote }}
-  AUTHENTIK_INSECURE: {{.Values.authentik.insecure | toString | b64enc | quote }}
\ No newline at end of file
+  AUTHENTIK_INSECURE: {{.Values.authentik.insecure | toString | b64enc | quote }}
+{{- end }}
\ No newline at end of file
diff --git a/charts/authentik-outpost/templates/service.yaml b/charts/authentik-outpost/templates/service.yaml
index 6dbff66..ccd5473 100644
--- a/charts/authentik-outpost/templates/service.yaml
+++ b/charts/authentik-outpost/templates/service.yaml
@@ -1,9 +1,9 @@
 apiVersion: v1
 kind: Service
 metadata:
-  name: {{ include "authentik-outpost.fullname" . }}
+  name: {{ include "common.names.fullname" . }}
   labels:
-    {{- include "authentik-outpost.labels" . | nindent 4 }}
+    {{- include "common.labels.standard" . | nindent 4 }}
 spec:
   type: {{.Values.service.type }}
   ports:
@@ -16,4 +16,4 @@ spec:
       protocol: TCP
       name: https
   selector:
-    {{- include "authentik-outpost.selectorLabels" . | nindent 4 }}
\ No newline at end of file
+    {{- include "common.labels.matchLabels" . | nindent 4 }}
\ No newline at end of file
diff --git a/charts/authentik-outpost/tests/golden/fixtures/default.golden.yaml b/charts/authentik-outpost/tests/golden/fixtures/default.golden.yaml
index d9e71de..26a02ca 100644
--- a/charts/authentik-outpost/tests/golden/fixtures/default.golden.yaml
+++ b/charts/authentik-outpost/tests/golden/fixtures/default.golden.yaml
@@ -7,8 +7,8 @@ metadata:
   labels:
     app.kubernetes.io/name: authentik-outpost
     app.kubernetes.io/instance: golden-file-test
-    app.kubernetes.io/version: "2026.2.6"
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/version: "2026.2.6"
 spec:
   replicas: 1
   selector:
@@ -35,6 +35,18 @@ spec:
           envFrom:
             - secretRef:
                 name: golden-file-test-authentik-outpost
+          livenessProbe:
+            httpGet:
+              path: /outpost.goauthentik.io/ping
+              port: http
+            initialDelaySeconds: 10
+            periodSeconds: 10
+          readinessProbe:
+            httpGet:
+              path: /outpost.goauthentik.io/ping
+              port: http
+            initialDelaySeconds: 10
+            periodSeconds: 10
           resources:
             limits:
               cpu: 100m
@@ -51,8 +63,8 @@ metadata:
   labels:
     app.kubernetes.io/name: authentik-outpost
     app.kubernetes.io/instance: golden-file-test
-    app.kubernetes.io/version: "2026.2.6"
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/version: "2026.2.6"
 type: Opaque
 data:
   AUTHENTIK_HOST: "aHR0cHM6Ly9hdXRoZW50aWsudGVzdC5jb20="
@@ -67,8 +79,8 @@ metadata:
   labels:
     app.kubernetes.io/name: authentik-outpost
     app.kubernetes.io/instance: golden-file-test
-    app.kubernetes.io/version: "2026.2.6"
     app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/version: "2026.2.6"
 spec:
   type: ClusterIP
   ports:
diff --git a/charts/authentik-outpost/tests/golden/goldenfiles.go b/charts/authentik-outpost/tests/golden/goldenfiles.go
index d5ad463..1fda96c 100644
--- a/charts/authentik-outpost/tests/golden/goldenfiles.go
+++ b/charts/authentik-outpost/tests/golden/goldenfiles.go
@@ -10,7 +10,7 @@ import (
 	"github.com/stretchr/testify/suite"
 )
 
-var update = flag.Bool("update-golden", true, "update golden test output files")
+var update = flag.Bool("update-golden", false, "update golden test output files")
 
 type TemplateGoldenTest struct {
 	suite.Suite
diff --git a/charts/authentik-outpost/values.yaml b/charts/authentik-outpost/values.yaml
index 6126d16..d2b44e5 100644
--- a/charts/authentik-outpost/values.yaml
+++ b/charts/authentik-outpost/values.yaml
@@ -24,6 +24,9 @@ authentik:
   # -- If true, disables TLS certificate verification for the connection to Authentik.
   # Should only be used for testing or with self-signed certificates.
   insecure: false
+  # -- Use an existing secret instead of creating one.
+  # Secret must contain AUTHENTIK_HOST, AUTHENTIK_TOKEN, AUTHENTIK_INSECURE keys.
+  existingSecretName: ""
 
 service:
   # -- The type of Kubernetes service to create for the outpost.
@@ -33,6 +36,26 @@ service:
   # -- The HTTPS port for the service.
   portHttps: 9443
 
+# -- Liveness probe configuration for the outpost pod.
+# Checks if the outpost is alive by hitting the ping endpoint.
+# If the probe fails, Kubernetes will restart the pod.
+livenessProbe:
+  httpGet:
+    path: /outpost.goauthentik.io/ping
+    port: http
+  initialDelaySeconds: 10
+  periodSeconds: 10
+
+# -- Readiness probe configuration for the outpost pod.
+# Checks if the outpost is ready to receive traffic.
+# If the probe fails, Kubernetes will remove the pod from the load balancer.
+readinessProbe:
+  httpGet:
+    path: /outpost.goauthentik.io/ping
+    port: http
+  initialDelaySeconds: 10
+  periodSeconds: 10
+
 # -- Resource requests and limits for the outpost pod.
 # It is recommended to adjust these values based on observed performance.
 resources:

From e612c34c9294b154f94e2fb84eac1c83c6ebcbef Mon Sep 17 00:00:00 2001
From: andrycorr <andrycorry@gmail.com>
Date: Tue, 28 Jul 2026 10:04:35 +0300
Subject: [PATCH 5/5] fix ingress

---
 charts/authentik-outpost/templates/ingress.yaml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/charts/authentik-outpost/templates/ingress.yaml b/charts/authentik-outpost/templates/ingress.yaml
index b2827ca..eb06120 100644
--- a/charts/authentik-outpost/templates/ingress.yaml
+++ b/charts/authentik-outpost/templates/ingress.yaml
@@ -28,7 +28,7 @@ spec:
             pathType: Prefix
             backend:
               service:
-                name: authentik-outpost
+                name: {{ include "common.names.fullname" . }}
                 port:
                   name: http
     {{- range .Values.ingress.extraHosts }}
@@ -39,7 +39,7 @@ spec:
             pathType: Prefix
             backend:
               service:
-                name: authentik-outpost
+                name: {{ include "common.names.fullname" . }}
                 port:
                   name: http
     {{- end }}