authelia helm

Authelia is an open-source authentication and authorization server and portal fulfilling the identity and access management (IAM) role of information security in providing multi-factor authentication and single sign-on (SSO) for your applications via a web portal. It acts as a companion for common reverse proxies.

More popular helm chart found

authelia from bjw-s-labs/charts is more popular with 18 repositories.

Install

Install with:

helm repo add bjw-s-charts https://bjw-s-labs.github.io/helm-charts/
helm install authelia bjw-s-charts/app-template -f values.yaml

Examples

See examples from other people.

Top Repositories (1 out of 5)

NameRepoStarsVersionTimestamp
autheliacarpenike/k8s-gitops3132.0.19 months ago

Values

See the most popular values for this chart:

KeyTypes
persistence.config.name (5)
authelia-configmap
string
persistence.config.type (5)
configMap
string
persistence.config.globalMounts[].path (4)
/config/configuration.yaml
string
persistence.config.globalMounts[].readOnly (4)
true
boolean
persistence.config.globalMounts[].subPath (4)
configuration.yaml
string
persistence.config.enabled (3)
true
boolean
persistence.config.mountPath (1)
/config/configuration.yaml
string
persistence.config.readOnly (1)
false
boolean
persistence.config.subPath (1)
configuration.yaml
string
persistence.data.enabled (1)
true
boolean
persistence.data.existingClaim (1)
data-authelia
string
persistence.data.type (1)
pvc
string
persistence.secret-files.enabled (1)
true
boolean
persistence.secret-files.globalMounts[].path (1)
/config/secret
string
persistence.secret-files.name (1)
authelia-secret
string
persistence.secret-files.type (1)
secret
string
controllers.authelia.annotations."reloader.stakater.com/auto" (3)
true
string
controllers.authelia.containers.app.env.AUTHELIA_SERVER_ADDRESS (3)
tcp://0.0.0.0:80
string
controllers.authelia.containers.app.env.AUTHELIA_SERVER_DISABLE_HEALTHCHECK (3)
true
string
controllers.authelia.containers.app.env.AUTHELIA_TELEMETRY_METRICS_ADDRESS (3)
tcp://0.0.0.0:8080
string
controllers.authelia.containers.app.env.AUTHELIA_TELEMETRY_METRICS_ENABLED (3)
true
string
controllers.authelia.containers.app.env.AUTHELIA_THEME (3)
dark
string
controllers.authelia.containers.app.env.X_AUTHELIA_CONFIG (3)
/config/configuration.yaml
string
controllers.authelia.containers.app.env.X_AUTHELIA_CONFIG_FILTERS (3)
expand-env
string
controllers.authelia.containers.app.envFrom[].secretRef.name (3)
authelia-secrets
string
controllers.authelia.containers.app.image.repository (3)
ghcr.io/authelia/authelia
string
controllers.authelia.containers.app.image.tag (3)
4.39.20@sha256:1b363e9279e742397966333f364e0876ae02bf5c876de73e83af6d48c57ff51b
string
controllers.authelia.containers.app.probes.liveness.custom (3)
true
boolean
controllers.authelia.containers.app.probes.liveness.enabled (3)
true
boolean
controllers.authelia.containers.app.probes.liveness.spec.failureThreshold (3)
3
number
controllers.authelia.containers.app.probes.liveness.spec.httpGet.path (3)
/api/health
string
controllers.authelia.containers.app.probes.liveness.spec.httpGet.port (3)
80
number
controllers.authelia.containers.app.probes.liveness.spec.initialDelaySeconds (3)
0
number
controllers.authelia.containers.app.probes.liveness.spec.periodSeconds (3)
10
number
controllers.authelia.containers.app.probes.liveness.spec.timeoutSeconds (3)
1
number
controllers.authelia.containers.app.probes.readiness.custom (3)
true
boolean
controllers.authelia.containers.app.probes.readiness.enabled (3)
true
boolean
controllers.authelia.containers.app.probes.readiness.spec.failureThreshold (3)
3
number
controllers.authelia.containers.app.probes.readiness.spec.httpGet.path (3)
/api/health
string
controllers.authelia.containers.app.probes.readiness.spec.httpGet.port (3)
80
number
controllers.authelia.containers.app.probes.readiness.spec.initialDelaySeconds (3)
0
number
controllers.authelia.containers.app.probes.readiness.spec.periodSeconds (3)
10
number
controllers.authelia.containers.app.probes.readiness.spec.timeoutSeconds (3)
1
number
controllers.authelia.containers.app.resources.limits.memory (3)
128Mi
string
controllers.authelia.containers.app.resources.requests.cpu (3)
10m
string
controllers.authelia.containers.app.resources.requests.memory (1)
32Mi
string
controllers.authelia.containers.app.securityContext.allowPrivilegeEscalation (3)
false
boolean
controllers.authelia.containers.app.securityContext.capabilities.drop[] (3)
- ALL
string
controllers.authelia.containers.app.securityContext.readOnlyRootFilesystem (3)
true
boolean
controllers.authelia.replicas (3)
2
number
controllers.authelia.strategy (3)
RollingUpdate
string
controllers.authelia.initContainers.init-db.envFrom[].secretRef.name (1)
authelia-secret
string
controllers.authelia.initContainers.init-db.image.repository (1)
ghcr.io/home-operations/postgres-init
string
controllers.authelia.initContainers.init-db.image.tag (1)
18.4
number
controllers.authelia.pod.securityContext.fsGroup (1)
1000
number
controllers.authelia.pod.securityContext.fsGroupChangePolicy (1)
OnRootMismatch
string
controllers.authelia.pod.securityContext.runAsGroup (1)
1000
number
controllers.authelia.pod.securityContext.runAsNonRoot (1)
true
boolean
controllers.authelia.pod.securityContext.runAsUser (1)
1000
number
controllers.authelia.pod.securityContext.seccompProfile.type (1)
RuntimeDefault
string
controllers.main.annotations."reloader.stakater.com/auto" (1)
true
string
controllers.main.containers.main.env.AUTHELIA_SERVER_ADDRESS (1)
tcp://0.0.0.0:80
string
controllers.main.containers.main.env.AUTHELIA_SERVER_DISABLE_HEALTHCHECK (1)
true
string
controllers.main.containers.main.env.AUTHELIA_TELEMETRY_METRICS_ADDRESS (1)
tcp://0.0.0.0:8080
string
controllers.main.containers.main.env.AUTHELIA_TELEMETRY_METRICS_ENABLED (1)
true
string
controllers.main.containers.main.env.AUTHELIA_THEME (1)
dark
string
controllers.main.containers.main.env.X_AUTHELIA_CONFIG (1)
/config/configuration.yaml
string
controllers.main.containers.main.env.X_AUTHELIA_CONFIG_FILTERS (1)
expand-env
string
controllers.main.containers.main.envFrom[].secretRef.name (1)
authelia-secret
string
controllers.main.containers.main.image.repository (1)
ghcr.io/authelia/authelia
string
controllers.main.containers.main.image.tag (1)
v4.38.0-beta3@sha256:b48ae4d0ed9d1eee76efe382df60928bae550ec19e5663858dde6dc5f41cf285
string
controllers.main.containers.main.probes.liveness.custom (1)
true
boolean
controllers.main.containers.main.probes.liveness.enabled (1)
true
boolean
controllers.main.containers.main.probes.liveness.spec.failureThreshold (1)
3
number
controllers.main.containers.main.probes.liveness.spec.httpGet.path (1)
/api/health
string
controllers.main.containers.main.probes.liveness.spec.httpGet.port (1)
80
number
controllers.main.containers.main.probes.liveness.spec.initialDelaySeconds (1)
0
number
controllers.main.containers.main.probes.liveness.spec.periodSeconds (1)
10
number
controllers.main.containers.main.probes.liveness.spec.timeoutSeconds (1)
1
number
controllers.main.containers.main.probes.readiness.custom (1)
true
boolean
controllers.main.containers.main.probes.readiness.enabled (1)
true
boolean
controllers.main.containers.main.probes.readiness.spec.failureThreshold (1)
3
number
controllers.main.containers.main.probes.readiness.spec.httpGet.path (1)
/api/health
string
controllers.main.containers.main.probes.readiness.spec.httpGet.port (1)
80
number
controllers.main.containers.main.probes.readiness.spec.initialDelaySeconds (1)
0
number
controllers.main.containers.main.probes.readiness.spec.periodSeconds (1)
10
number
controllers.main.containers.main.probes.readiness.spec.timeoutSeconds (1)
1
number
controllers.main.containers.main.probes.startup.enabled (1)
false
boolean
controllers.main.containers.main.resources.limits.memory (1)
100Mi
string
controllers.main.containers.main.resources.requests.cpu (1)
5m
string
controllers.main.containers.main.resources.requests.memory (1)
10Mi
string
controllers.main.initContainers.init-db.envFrom[].secretRef.name (1)
authelia-secret
string
controllers.main.initContainers.init-db.image.pullPolicy (1)
IfNotPresent
string
controllers.main.initContainers.init-db.image.repository (1)
ghcr.io/lltr/postgres-initdb
string
controllers.main.initContainers.init-db.image.tag (1)
15.6
number
controllers.main.pod.enableServiceLinks (1)
false
boolean
controllers.main.pod.securityContext.runAsGroup (1)
568
number
controllers.main.pod.securityContext.runAsUser (1)
568
number
controllers.main.pod.topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/name" (1)
authelia
string
controllers.main.pod.topologySpreadConstraints[].maxSkew (1)
1
number
controllers.main.pod.topologySpreadConstraints[].topologyKey (1)
kubernetes.io/hostname
string
controllers.main.pod.topologySpreadConstraints[].whenUnsatisfiable (1)
DoNotSchedule
string
controllers.main.replicas (1)
2
number
controllers.main.strategy (1)
RollingUpdate
string
route.app.hostnames[] (3)
- auth.${SECRET_PUBLIC_DOMAIN}
string
route.app.parentRefs[].name (3)
traefik-gateway
string
route.app.parentRefs[].namespace (3)
networking
string
route.app.parentRefs[].sectionName (2)
websecure
string
route.app.rules[].backendRefs[].identifier (2)
app
string
route.app.rules[].backendRefs[].port (2)
80
number
service.app.controller (3)
authelia
string
service.app.ports.http.port (3)
80
number
service.app.ports.metrics.port (3)
8080
number
service.main.ports.http.port (2)
80
number
service.main.ports.metrics.port (2)
8080
number
service.main.ports.metrics.enabled (1)
true
boolean
defaultPodOptions.securityContext.runAsGroup (2)
65534
number
defaultPodOptions.securityContext.runAsNonRoot (2)
true
boolean
defaultPodOptions.securityContext.runAsUser (2)
65534
number
defaultPodOptions.securityContext.seccompProfile.type (2)
RuntimeDefault
string
defaultPodOptions.topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/name" (2)
authelia
string
defaultPodOptions.topologySpreadConstraints[].maxSkew (2)
1
number
defaultPodOptions.topologySpreadConstraints[].topologyKey (2)
kubernetes.io/hostname
string
defaultPodOptions.topologySpreadConstraints[].whenUnsatisfiable (2)
DoNotSchedule
string
ingress.main.annotations."external-dns.alpha.kubernetes.io/target" (2)
external.holthome.net
string
ingress.main.annotations."nginx.ingress.kubernetes.io/configuration-snippet" (2)
add_header Cache-Control "no-store"; add_header Pragma "no-cache"; add_header X-Frame-Options "SAMEORIGIN"; add_header X-XSS-Protection "1; mode=block";
string
ingress.main.annotations."cert-manager.io/cluster-issuer" (1)
letsencrypt-production
string
ingress.main.annotations."external-dns.home.arpa/enabled" (1)
true
string
ingress.main.enabled (2)
true
boolean
ingress.main.hosts[].host (2)
auth.holthome.net
string
ingress.main.hosts[].paths[].path (2)
/
string
ingress.main.hosts[].paths[].pathType (2)
Prefix
string
ingress.main.hosts[].paths[].service.name (1)
main
string
ingress.main.hosts[].paths[].service.port (1)
http
string
ingress.main.tls[].hosts[] (2)
- auth.holthome.net
string
ingress.main.tls[].secretName (1)
authelia-tls
string
ingress.main.className (1)
nginx
string
ingress.main.ingressClassName (1)
external-nginx
string
networkpolicies.allow-dns.controller (2)
authelia
string
networkpolicies.allow-dns.policyTypes[] (2)
- Egress
string
networkpolicies.allow-dns.rules.egress[].ports[].port (2)
53
53
number
networkpolicies.allow-dns.rules.egress[].ports[].protocol (2)
UDP
TCP
string
networkpolicies.allow-dns.rules.egress[].to[].namespaceSelector.matchLabels."kubernetes.io/metadata.name" (2)
kube-system
string
networkpolicies.allow-external-egress.controller (2)
authelia
string
networkpolicies.allow-external-egress.policyTypes[] (2)
- Egress
string
networkpolicies.allow-external-egress.rules.egress[].ports[].port (2)
443
587
number
networkpolicies.allow-external-egress.rules.egress[].ports[].protocol (2)
TCP
TCP
string
networkpolicies.allow-external-egress.rules.egress[].to[].ipBlock.cidr (2)
0.0.0.0/0
string
networkpolicies.allow-external-egress.rules.egress[].to[].ipBlock.except[] (2)
- "10.0.0.0/8"
- "172.16.0.0/12"
- "192.168.0.0/16"
string
networkpolicies.allow-openldap-egress.controller (2)
authelia
string
networkpolicies.allow-openldap-egress.policyTypes[] (2)
- Egress
string
networkpolicies.allow-openldap-egress.rules.egress[].ports[].port (2)
1389
1636
number
networkpolicies.allow-openldap-egress.rules.egress[].ports[].protocol (2)
TCP
TCP
string
networkpolicies.allow-openldap-egress.rules.egress[].to[].namespaceSelector.matchLabels."kubernetes.io/metadata.name" (2)
auth
string
networkpolicies.allow-openldap-egress.rules.egress[].to[].podSelector.matchLabels."app.kubernetes.io/instance" (2)
openldap
string
networkpolicies.allow-postgres-egress.controller (2)
authelia
string
networkpolicies.allow-postgres-egress.policyTypes[] (2)
- Egress
string
networkpolicies.allow-postgres-egress.rules.egress[].ports[].port (2)
5432
number
networkpolicies.allow-postgres-egress.rules.egress[].ports[].protocol (2)
TCP
string
networkpolicies.allow-postgres-egress.rules.egress[].to[].namespaceSelector.matchLabels."kubernetes.io/metadata.name" (2)
databases
string
networkpolicies.allow-postgres-egress.rules.egress[].to[].podSelector.matchLabels."cnpg.io/cluster" (2)
authelia-postgres-v17
string
networkpolicies.allow-traefik-ingress.controller (2)
authelia
string
networkpolicies.allow-traefik-ingress.policyTypes[] (2)
- Ingress
string
networkpolicies.allow-traefik-ingress.rules.ingress[].from[].namespaceSelector.matchLabels."kubernetes.io/metadata.name" (2)
networking
string
networkpolicies.allow-traefik-ingress.rules.ingress[].ports[].port (2)
80
number
networkpolicies.allow-traefik-ingress.rules.ingress[].ports[].protocol (2)
TCP
string
networkpolicies.allow-valkey-egress.controller (2)
authelia
string
networkpolicies.allow-valkey-egress.policyTypes[] (2)
- Egress
string
networkpolicies.allow-valkey-egress.rules.egress[].ports[].port (2)
6379
number
networkpolicies.allow-valkey-egress.rules.egress[].ports[].protocol (2)
TCP
string
networkpolicies.allow-valkey-egress.rules.egress[].to[].namespaceSelector.matchLabels."kubernetes.io/metadata.name" (2)
auth
string
networkpolicies.allow-valkey-egress.rules.egress[].to[].podSelector.matchLabels."app.kubernetes.io/instance" (2)
valkey
string
networkpolicies.default-deny.controller (2)
authelia
string
networkpolicies.default-deny.policyTypes[] (2)
- Ingress
- Egress
string
serviceMonitor.main.enabled (2)
true
boolean
serviceMonitor.main.endpoints[].interval (2)
1m
string
serviceMonitor.main.endpoints[].path (2)
/metrics
string
serviceMonitor.main.endpoints[].port (2)
metrics
string
serviceMonitor.main.endpoints[].scheme (2)
http
string
serviceMonitor.main.endpoints[].scrapeTimeout (2)
10s
string
serviceMonitor.app.enabled (1)
true
boolean
serviceMonitor.app.endpoints[].interval (1)
1m
string
serviceMonitor.app.endpoints[].path (1)
/metrics
string
serviceMonitor.app.endpoints[].port (1)
metrics
string
serviceMonitor.app.endpoints[].scheme (1)
http
string
serviceMonitor.app.endpoints[].scrapeTimeout (1)
10s
string
serviceMonitor.app.serviceName (1)
authelia
string
args[] (1)
- --config
- /config/configuration.yaml
- --config.experimental.filters
- expand-env
string
controller.annotations."reloader.stakater.com/auto" (1)
true
string
controller.replicas (1)
1
number
controller.strategy (1)
Recreate
string
enableServiceLinks (1)
false
boolean
env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ADDITIONAL_GROUPS_DN (1)
ou=groups
string
env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ADDITIONAL_USERS_DN (1)
ou=people
string
env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_BASE_DN (1)
dc=holthome,dc=net
string
env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_DISPLAY_NAME_ATTRIBUTE (1)
displayName
string
env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_GROUP_NAME_ATTRIBUTE (1)
cn
string
env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_GROUPS_FILTER (1)
(member={dn})
string
env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_IMPLEMENTATION (1)
custom
string
env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_MAIL_ATTRIBUTE (1)
mail
string
env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_START_TLS (1)
false
string
env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_TIMEOUT (1)
5s
string
env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_URL (1)
ldap://lldap.security.svc.cluster.local:389
string
env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_USERNAME_ATTRIBUTE (1)
uid
string
env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_USERS_FILTER (1)
(&({username_attribute}={input})(objectClass=person))
string
env.AUTHELIA_AUTHENTICATION_BACKEND_PASSWORD_RESET_DISABLE (1)
true
string
env.AUTHELIA_AUTHENTICATION_BACKEND_REFRESH_INTERVAL (1)
1m
string
env.AUTHELIA_DEFAULT_REDIRECTION_URL (1)
https://auth.holthome.net
string
env.AUTHELIA_DUO_API_DISABLE (1)
true
string
env.AUTHELIA_LOG_LEVEL (1)
info
string
env.AUTHELIA_NOTIFIER_SMTP_HOST (1)
smtp.mailgun.org
string
env.AUTHELIA_NOTIFIER_SMTP_PORT (1)
587
string
env.AUTHELIA_NOTIFIER_SMTP_SENDER (1)
Authelia <authelia@holthome.net>
string
env.AUTHELIA_NOTIFIER_SMTP_USERNAME (1)
authelia@holthome.net
string
env.AUTHELIA_SERVER_DISABLE_HEALTHCHECK (1)
true
string
env.AUTHELIA_SERVER_PORT (1)
80
number
env.AUTHELIA_SESSION_DOMAIN (1)
holthome.net
string
env.AUTHELIA_SESSION_NAME (1)
authelia-home-ops
string
env.AUTHELIA_STORAGE_LOCAL_PATH (1)
/data/db.sqlite3
string
env.AUTHELIA_TELEMETRY_METRICS_ADDRESS (1)
tcp://0.0.0.0:8080
string
env.AUTHELIA_TELEMETRY_METRICS_ENABLED (1)
true
string
env.AUTHELIA_THEME (1)
dark
string
env.AUTHELIA_TOTP_ISSUER (1)
authelia.com
string
env.AUTHELIA_WEBAUTHN_DISABLE (1)
true
string
envFrom[].secretRef.name (1)
authelia-secret
string
image.repository (1)
ghcr.io/authelia/authelia
string
image.tag (1)
master@sha256:bf33fbcf6a63e76be876908118a522c1d3aa99049957f9f83c490f076348e615
string
podSecurityContext.fsGroup (1)
568
number
podSecurityContext.fsGroupChangePolicy (1)
OnRootMismatch
string
podSecurityContext.runAsGroup (1)
568
number
podSecurityContext.runAsUser (1)
568
number
probes.liveness.custom (1)
true
boolean
probes.liveness.enabled (1)
true
boolean
probes.liveness.spec.failureThreshold (1)
3
number
probes.liveness.spec.httpGet.path (1)
/api/health
string
probes.liveness.spec.httpGet.port (1)
80
number
probes.liveness.spec.initialDelaySeconds (1)
0
number
probes.liveness.spec.periodSeconds (1)
10
number
probes.liveness.spec.timeoutSeconds (1)
1
number
probes.readiness.custom (1)
true
boolean
probes.readiness.enabled (1)
true
boolean
probes.readiness.spec.failureThreshold (1)
3
number
probes.readiness.spec.httpGet.path (1)
/api/health
string
probes.readiness.spec.httpGet.port (1)
80
number
probes.readiness.spec.initialDelaySeconds (1)
0
number
probes.readiness.spec.periodSeconds (1)
10
number
probes.readiness.spec.timeoutSeconds (1)
1
number
probes.startup.custom (1)
true
boolean
probes.startup.enabled (1)
true
boolean
probes.startup.spec.failureThreshold (1)
30
number
probes.startup.spec.httpGet.path (1)
/api/health
string
probes.startup.spec.httpGet.port (1)
80
number
probes.startup.spec.periodSeconds (1)
5
number
probes.startup.spec.successThreshold (1)
1
number
probes.startup.spec.timeoutSeconds (1)
1
number
resources.limits.memory (1)
200Mi
string
resources.requests.cpu (1)
5m
string
resources.requests.memory (1)
10Mi
string
topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/name" (1)
authelia
string
topologySpreadConstraints[].maxSkew (1)
1
number
topologySpreadConstraints[].topologyKey (1)
kubernetes.io/hostname
string
topologySpreadConstraints[].whenUnsatisfiable (1)
DoNotSchedule
string