From 92b5af92706f19be6c4605cc5230f64fc4969c99 Mon Sep 17 00:00:00 2001
From: James Elliott <james-d-elliott@users.noreply.github.com>
Date: Wed, 17 Feb 2021 13:12:40 +1100
Subject: [PATCH] feat: add ingress-nginx annotation suggestions

---
 charts/authelia/Chart.yaml          | 2 +-
 charts/authelia/templates/NOTES.txt | 7 +++++++
 2 files changed, 8 insertions(+), 1 deletion(-)

diff --git a/charts/authelia/Chart.yaml b/charts/authelia/Chart.yaml
index 805b0da..e1dc772 100644
--- a/charts/authelia/Chart.yaml
+++ b/charts/authelia/Chart.yaml
@@ -1,6 +1,6 @@
 apiVersion: v2
 name: authelia
-version: 0.2.3
+version: 0.2.4
 kubeVersion: ">= 1.13.0-0"
 description: Authelia is a Single Sign-On Multi-Factor portal for web apps
 type: application
diff --git a/charts/authelia/templates/NOTES.txt b/charts/authelia/templates/NOTES.txt
index a0892d5..5e92052 100644
--- a/charts/authelia/templates/NOTES.txt
+++ b/charts/authelia/templates/NOTES.txt
@@ -8,6 +8,13 @@ You have selected to use a regular ingress.
 You should be able to access Authelia soon via https://{{ include "authelia.ingressHostWithPath" . }} if everything is configured correctly in your values and the DNS record points to the correct location.
 
 You will also need to direct your ingress to use the following path for forward auth: {{ include "authelia.forwardAuthPath" (merge (dict "Namespace" .Release.Namespace) .) }}.
+
+The following are the suggested annotations for 'ingress-nginx':
+
+    nginx.ingress.kubernetes.io/auth-url: http://{{ include "authelia.name" . }}.{{ .Release.Namespace }}/api/verify
+    nginx.ingress.kubernetes.io/auth-signin: https://{{ include "authelia.ingressHostWithPath" . }}
+    nginx.ingress.kubernetes.io/auth-response-headers: Remote-User,Remote-Name,Remote-Groups,Remote-Email
+
 {{- else if (include "authelia.enabled.ingress.traefik" .) }}
 You have selected the Traefik CRD to deploy the ingress. You can apply the {{ include "authelia.ingress.traefikCRD.middleware.name.chainAuth" . }} ({{ .Release.Namespace }} namespace) middleware to any Traefik ingress type in order to use Authelia auth with that ingress.