# apiVersion: traefik.io/v1alpha1
# kind: IngressRoute
# metadata:
#   name: chart_name
#   namespace: chart_namespace
# spec:
#   routes:
#     - kind: Rule
#       match: Host(`chart_host`)
#       middlewares:
#         - name: authentik
#       services:
#         - name: chart_service
#           namespace: chart_namespace
#           port: chart_port
# ---
# apiVersion: traefik.io/v1alpha1
# kind: Middleware
# metadata:
#   name: authentik
#   namespace: chart_namespace
# spec:
#   forwardAuth:
#     address: https://chart_host/outpost.goauthentik.io/auth/traefik
#     authResponseHeaders:
#       - X-authentik-username
#       - X-authentik-groups
#       - X-authentik-email
#       - X-authentik-name
#       - X-authentik-uid
#       - X-authentik-jwt
#       - X-authentik-meta-jwks
#       - X-authentik-meta-outpost
#       - X-authentik-meta-provider
#       - X-authentik-meta-app
#       - X-authentik-meta-version
#     trustForwardHeader: true