authelia helm

Authelia is an open-source authentication and authorization server and portal fulfilling the identity and access management (IAM) role of information security in providing multi-factor authentication and single sign-on (SSO) for your applications via a web portal. It acts as a companion for common reverse proxies.

Install

Install with:

helm repo add bjw-s https://bjw-s.github.io/helm-charts/
helm install authelia bjw-s/app-template -f values.yaml

Top Repositories (5 out of 24)

See examples from other people.

NameRepoStarsVersionTimestamp
autheliacarpenike/k8s-gitops1982.0.1a day ago
autheliaharaldkoch/kochhaus-home692.3.03 days ago
autheliaauricom/home-ops1242.3.04 days ago
autheliakashalls/home-cluster491.5.15 days ago
autheliabudimanjojo/home-cluster1082.3.014 days ago

Values

See the most popular values for this chart:

KeyTypes
ingress.main.enabled (23)
true
boolean
ingress.main.hosts[].host (23)
auth.${SECRET_DOMAIN}
string
ingress.main.hosts[].paths[].path (23)
/
string
ingress.main.hosts[].paths[].pathType (20)
Prefix
string
ingress.main.hosts[].paths[].service.name (7)
main
string
ingress.main.hosts[].paths[].service.port (7)
http
string
ingress.main.tls[].hosts[] (23)
- auth.${SECRET_DOMAIN}
string
ingress.main.tls[].secretName (4)
authelia-tls
string
ingress.main.annotations."nginx.ingress.kubernetes.io/configuration-snippet" (21)
add_header Cache-Control "no-store"; add_header Pragma "no-cache"; add_header X-Frame-Options "SAMEORIGIN"; add_header X-XSS-Protection "1; mode=block";
string
ingress.main.annotations."external-dns.alpha.kubernetes.io/target" (14)
ipv4.${SECRET_DOMAIN}
string
ingress.main.annotations."hajimari.io/icon" (10)
mdi:shield-account
string
ingress.main.annotations."external-dns.home.arpa/enabled" (6)
true
string
ingress.main.annotations."cert-manager.io/cluster-issuer" (3)
letsencrypt-production
string
ingress.main.annotations.external-dns/is-public (2)
string
ingress.main.annotations."hajimari.io/appName" (2)
string
ingress.main.annotations."hajimari.io/enable" (2)
string
ingress.main.annotations."hajimari.io/group" (2)
string
ingress.main.annotations."external-dns.alpha.kubernetes.io/enabled" (1)
string
ingress.main.annotations."hajimari.io/name" (1)
string
ingress.main.annotations."nginx.ingress.kubernetes.io/enable-cors" (1)
string
ingress.main.ingressClassName (16)
nginx
string
ingress.main.className (7)
nginx
string
ingress.main.primary (1)
boolean
persistence.config.enabled (23)
true
boolean
persistence.config.name (23)
authelia-configmap
string
persistence.config.type (23)
configMap
string
persistence.config.mountPath (16)
/config/configuration.yml
string
persistence.config.readOnly (16)
false
boolean
persistence.config.subPath (16)
configuration.yml
string
persistence.config.globalMounts[].path (6)
/config/configuration.yaml
string
persistence.config.globalMounts[].readOnly (6)
true
boolean
persistence.config.globalMounts[].subPath (5)
configuration.yaml
string
persistence.data.enabled (4)
true
boolean
persistence.data.existingClaim (4)
string
persistence.data.type (3)
pvc
string
persistence.data.path (1)
string
persistence.data.subPath (1)
string
service.main.ports.http.port (23)
80
number
service.main.ports.http.enabled (1)
boolean
service.main.ports.http.primary (1)
boolean
service.main.ports.metrics.port (22)
8080
number
service.main.ports.metrics.enabled (18)
true
boolean
service.main.ports.redis.enabled (1)
boolean
service.main.ports.redis.port (1)
number
service.main.ports.redis.primary (1)
boolean
service.main.ipFamilyPolicy (1)
string
controller.strategy (17)
RollingUpdate
string
controller.replicas (16)
2
number
controller.annotations."reloader.stakater.com/auto" (13)
true
string
controller.rollingUpdate.surge (2)
number
controller.rollingUpdate.unavailable (1)
number
controller.type (1)
string
image.repository (17)
ghcr.io/authelia/authelia
string
image.tag (17)
4.37.5
string
enableServiceLinks (16)
false
boolean
envFrom[].secretRef.name (16)
authelia-secret
string
podSecurityContext.fsGroup (16)
568
number
podSecurityContext.fsGroupChangePolicy (16)
OnRootMismatch
string
podSecurityContext.runAsGroup (16)
568
number
podSecurityContext.runAsUser (16)
568
number
resources.limits.memory (16)
200Mi
string
resources.limits.cpu (1)
string
resources.requests.cpu (16)
5m
string
resources.requests.memory (16)
10Mi
string
topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/name" (16)
authelia
string
topologySpreadConstraints[].maxSkew (16)
1
number
topologySpreadConstraints[].topologyKey (16)
kubernetes.io/hostname
string
topologySpreadConstraints[].whenUnsatisfiable (16)
DoNotSchedule
string
serviceMonitor.main.enabled (15)
true
boolean
serviceMonitor.main.endpoints[].interval (15)
1m
string
serviceMonitor.main.endpoints[].path (15)
/metrics
string
serviceMonitor.main.endpoints[].port (15)
metrics
string
serviceMonitor.main.endpoints[].scheme (15)
http
string
serviceMonitor.main.endpoints[].scrapeTimeout (15)
10s
string
args[] (11)
- --config
- /config/configuration.yaml
- --config.experimental.filters
- expand-env
string
probes.liveness.custom (11)
true
boolean
probes.liveness.enabled (11)
true
boolean
probes.liveness.spec.failureThreshold (11)
3
number
probes.liveness.spec.httpGet.path (11)
/api/health
string
probes.liveness.spec.httpGet.port (11)
80
number
probes.liveness.spec.initialDelaySeconds (11)
0
number
probes.liveness.spec.periodSeconds (11)
10
number
probes.liveness.spec.timeoutSeconds (11)
1
number
probes.readiness.custom (11)
true
boolean
probes.readiness.enabled (11)
true
boolean
probes.readiness.spec.failureThreshold (11)
3
number
probes.readiness.spec.httpGet.path (11)
/api/health
string
probes.readiness.spec.httpGet.port (11)
80
number
probes.readiness.spec.initialDelaySeconds (11)
0
number
probes.readiness.spec.periodSeconds (11)
10
number
probes.readiness.spec.timeoutSeconds (11)
1
number
probes.startup.enabled (11)
false
boolean
probes.startup.custom (3)
true
boolean
probes.startup.spec.failureThreshold (3)
30
number
probes.startup.spec.httpGet.path (3)
/api/health
string
probes.startup.spec.httpGet.port (3)
80
number
probes.startup.spec.periodSeconds (3)
5
number
probes.startup.spec.successThreshold (3)
1
number
probes.startup.spec.timeoutSeconds (3)
1
number
env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ADDITIONAL_USERS_DN (8)
ou=people
string
env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_BASE_DN (8)
dc=home,dc=arpa
string
env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_GROUP_NAME_ATTRIBUTE (8)
cn
string
env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_GROUPS_FILTER (8)
(member={dn})
string
env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_MAIL_ATTRIBUTE (8)
mail
string
env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_URL (8)
ldap://lldap.security.svc.cluster.local:389
string
env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_USERNAME_ATTRIBUTE (8)
uid
string
env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_USERS_FILTER (8)
(&({username_attribute}={input})(objectClass=person))
string
env.AUTHELIA_AUTHENTICATION_BACKEND_PASSWORD_RESET_DISABLE (8)
true
string
env.AUTHELIA_DEFAULT_REDIRECTION_URL (8)
https://auth.${SECRET_DOMAIN}
string
env.AUTHELIA_DUO_API_DISABLE (8)
true
string
env.AUTHELIA_LOG_LEVEL (8)
info
string
env.AUTHELIA_NOTIFIER_SMTP_PORT (8)
25
number, string
env.AUTHELIA_NOTIFIER_SMTP_SENDER (8)
string
env.AUTHELIA_SERVER_DISABLE_HEALTHCHECK (8)
true
string
env.AUTHELIA_SERVER_PORT (8)
80
number
env.AUTHELIA_SESSION_DOMAIN (8)
${SECRET_DOMAIN}
string
env.AUTHELIA_TELEMETRY_METRICS_ADDRESS (8)
tcp://0.0.0.0:8080
string
env.AUTHELIA_TELEMETRY_METRICS_ENABLED (8)
true
string
env.AUTHELIA_THEME (8)
dark
string
env.AUTHELIA_TOTP_ISSUER (8)
authelia.com
string
env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_DISPLAY_NAME_ATTRIBUTE (7)
displayName
string
env.AUTHELIA_NOTIFIER_SMTP_HOST (7)
string
env.AUTHELIA_WEBAUTHN_DISABLE (7)
true
string
env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ADDITIONAL_GROUPS_DN (6)
ou=groups
string
env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_IMPLEMENTATION (6)
custom
string
env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_START_TLS (6)
false
string
env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_TIMEOUT (6)
5s
string
env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_USER (6)
string
env.AUTHELIA_AUTHENTICATION_BACKEND_REFRESH_INTERVAL (6)
1m
string
env.AUTHELIA_NOTIFIER_SMTP_DISABLE_REQUIRE_TLS (6)
true
string
env.AUTHELIA_NOTIFIER_DISABLE_STARTUP_CHECK (5)
true
string
env.AUTHELIA_SESSION_NAME (5)
authelia-home-ops
string
env.AUTHELIA_SESSION_REDIS_DATABASE_INDEX (5)
14
number
env.AUTHELIA_SESSION_REDIS_HOST (5)
redis.default.svc.cluster.local
string
env.AUTHELIA_NOTIFIER_SMTP_USERNAME (3)
string
env.AUTHELIA_STORAGE_LOCAL_PATH (3)
/data/db.sqlite3
string
env.AUTHELIA_SERVER_BUFFERS_READ (2)
number, string
env.AUTHELIA_SERVER_BUFFERS_WRITE (2)
number, string
env.AUTHELIA_SESSION_REDIS_PORT (1)
number
env.AUTHELIA_STORAGE_POSTGRES_DATABASE (1)
string
env.AUTHELIA_STORAGE_POSTGRES_HOST (1)
string
env.REDIS_REPLICATION_MODE (1)
string
controllers.main.annotations."reloader.stakater.com/auto" (7)
true
string
controllers.main.containers.main.envFrom[].secretRef.name (7)
authelia-secret
string
controllers.main.containers.main.envFrom[].secretRef.namespace (1)
string
controllers.main.containers.main.image.repository (7)
ghcr.io/authelia/authelia
string
controllers.main.containers.main.image.tag (7)
v4.38.0-beta3@sha256:46710251ba9142574d4384738e940116e3e526a8cd98bb01be8231995f0a5e37
string
controllers.main.containers.main.resources.requests.cpu (7)
10m
string
controllers.main.containers.main.resources.requests.memory (7)
32Mi
string
controllers.main.containers.main.resources.limits.memory (6)
128Mi
string
controllers.main.containers.main.env.AUTHELIA_SERVER_DISABLE_HEALTHCHECK (5)
true
string
controllers.main.containers.main.env.AUTHELIA_TELEMETRY_METRICS_ADDRESS (5)
tcp://0.0.0.0:8080
string
controllers.main.containers.main.env.AUTHELIA_TELEMETRY_METRICS_ENABLED (5)
true
string
controllers.main.containers.main.env.AUTHELIA_THEME (5)
dark
string
controllers.main.containers.main.env.AUTHELIA_SERVER_ADDRESS (4)
string
controllers.main.containers.main.env.X_AUTHELIA_CONFIG (3)
/config/configuration.yaml
string
controllers.main.containers.main.env.X_AUTHELIA_CONFIG_FILTERS (3)
expand-env
string
controllers.main.containers.main.env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ADDITIONAL_GROUPS_DN (2)
string
controllers.main.containers.main.env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ADDITIONAL_USERS_DN (2)
string
controllers.main.containers.main.env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_BASE_DN (2)
string
controllers.main.containers.main.env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_DISPLAY_NAME_ATTRIBUTE (2)
string
controllers.main.containers.main.env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_GROUP_NAME_ATTRIBUTE (2)
string
controllers.main.containers.main.env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_GROUPS_FILTER (2)
string
controllers.main.containers.main.env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_IMPLEMENTATION (2)
string
controllers.main.containers.main.env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_MAIL_ATTRIBUTE (2)
string
controllers.main.containers.main.env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_START_TLS (2)
string
controllers.main.containers.main.env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_TIMEOUT (2)
string
controllers.main.containers.main.env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_URL (2)
string
controllers.main.containers.main.env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_USER (2)
string
controllers.main.containers.main.env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_USERNAME_ATTRIBUTE (2)
string
controllers.main.containers.main.env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_USERS_FILTER (2)
string
controllers.main.containers.main.env.AUTHELIA_AUTHENTICATION_BACKEND_PASSWORD_RESET_DISABLE (2)
string
controllers.main.containers.main.env.AUTHELIA_AUTHENTICATION_BACKEND_REFRESH_INTERVAL (2)
string
controllers.main.containers.main.env.AUTHELIA_DEFAULT_REDIRECTION_URL (2)
string
controllers.main.containers.main.env.AUTHELIA_DUO_API_DISABLE (2)
string
controllers.main.containers.main.env.AUTHELIA_LOG_LEVEL (2)
string
controllers.main.containers.main.env.AUTHELIA_NOTIFIER_DISABLE_STARTUP_CHECK (2)
string
controllers.main.containers.main.env.AUTHELIA_NOTIFIER_SMTP_DISABLE_REQUIRE_TLS (2)
string
controllers.main.containers.main.env.AUTHELIA_NOTIFIER_SMTP_HOST (2)
string
controllers.main.containers.main.env.AUTHELIA_NOTIFIER_SMTP_PORT (2)
string
controllers.main.containers.main.env.AUTHELIA_NOTIFIER_SMTP_SENDER (2)
string
controllers.main.containers.main.env.AUTHELIA_SESSION_DOMAIN (2)
string
controllers.main.containers.main.env.AUTHELIA_SESSION_NAME (2)
string
controllers.main.containers.main.env.AUTHELIA_SESSION_REDIS_HOST (2)
string
controllers.main.containers.main.env.AUTHELIA_STORAGE_POSTGRES_DATABASE.valueFrom.secretKeyRef.key (1)
string
controllers.main.containers.main.env.AUTHELIA_STORAGE_POSTGRES_DATABASE.valueFrom.secretKeyRef.name (1)
string
controllers.main.containers.main.env.AUTHELIA_STORAGE_POSTGRES_DATABASE (2)
string
controllers.main.containers.main.env.AUTHELIA_STORAGE_POSTGRES_HOST.valueFrom.secretKeyRef.key (1)
string
controllers.main.containers.main.env.AUTHELIA_STORAGE_POSTGRES_HOST.valueFrom.secretKeyRef.name (1)
string
controllers.main.containers.main.env.AUTHELIA_STORAGE_POSTGRES_HOST (2)
string
controllers.main.containers.main.env.AUTHELIA_TOTP_ISSUER (2)
string
controllers.main.containers.main.env.AUTHELIA_WEBAUTHN_DISABLE (2)
string
controllers.main.containers.main.env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_PASSWORD (1)
string
controllers.main.containers.main.env.AUTHELIA_IDENTITY_PROVIDERS_OIDC_HMAC_SECRET (1)
string
controllers.main.containers.main.env.AUTHELIA_JWT_SECRET (1)
string
controllers.main.containers.main.env.AUTHELIA_SERVER_BUFFERS_READ (1)
string
controllers.main.containers.main.env.AUTHELIA_SERVER_PORT (1)
number
controllers.main.containers.main.env.AUTHELIA_SESSION_REDIS_DATABASE_INDEX (1)
number
controllers.main.containers.main.env.AUTHELIA_SESSION_REDIS_PORT (1)
number
controllers.main.containers.main.env.AUTHELIA_SESSION_SECRET (1)
string
controllers.main.containers.main.env.AUTHELIA_STORAGE_ENCRYPTION_KEY (1)
string
controllers.main.containers.main.env.AUTHELIA_STORAGE_POSTGRES_PASSWORD.valueFrom.secretKeyRef.key (1)
string
controllers.main.containers.main.env.AUTHELIA_STORAGE_POSTGRES_PASSWORD.valueFrom.secretKeyRef.name (1)
string
controllers.main.containers.main.env.AUTHELIA_STORAGE_POSTGRES_PASSWORD (1)
string
controllers.main.containers.main.env.AUTHELIA_STORAGE_POSTGRES_PORT.valueFrom.secretKeyRef.key (1)
string
controllers.main.containers.main.env.AUTHELIA_STORAGE_POSTGRES_PORT.valueFrom.secretKeyRef.name (1)
string
controllers.main.containers.main.env.AUTHELIA_STORAGE_POSTGRES_USERNAME.valueFrom.secretKeyRef.key (1)
string
controllers.main.containers.main.env.AUTHELIA_STORAGE_POSTGRES_USERNAME.valueFrom.secretKeyRef.name (1)
string
controllers.main.containers.main.env.AUTHELIA_STORAGE_POSTGRES_USERNAME (1)
string
controllers.main.containers.main.env.CLUSTER_DOMAIN (1)
string
controllers.main.containers.main.env.GRAFANA_OAUTH_CLIENT_SECRET (1)
string
controllers.main.containers.main.env.SECRET_HOMELAN_IPV4 (1)
string
controllers.main.containers.main.probes.liveness.custom (5)
true
boolean
controllers.main.containers.main.probes.liveness.enabled (5)
true
boolean
controllers.main.containers.main.probes.liveness.spec.failureThreshold (5)
3
number
controllers.main.containers.main.probes.liveness.spec.httpGet.path (5)
/api/health
string
controllers.main.containers.main.probes.liveness.spec.httpGet.port (5)
80
number
controllers.main.containers.main.probes.liveness.spec.initialDelaySeconds (5)
0
number
controllers.main.containers.main.probes.liveness.spec.periodSeconds (5)
10
number
controllers.main.containers.main.probes.liveness.spec.timeoutSeconds (5)
1
number
controllers.main.containers.main.probes.readiness.custom (5)
true
boolean
controllers.main.containers.main.probes.readiness.enabled (5)
true
boolean
controllers.main.containers.main.probes.readiness.spec.failureThreshold (5)
3
number
controllers.main.containers.main.probes.readiness.spec.httpGet.path (5)
/api/health
string
controllers.main.containers.main.probes.readiness.spec.httpGet.port (5)
80
number
controllers.main.containers.main.probes.readiness.spec.initialDelaySeconds (5)
0
number
controllers.main.containers.main.probes.readiness.spec.periodSeconds (5)
10
number
controllers.main.containers.main.probes.readiness.spec.timeoutSeconds (5)
1
number
controllers.main.containers.main.probes.startup.enabled (5)
false
boolean
controllers.main.containers.main.args[] (3)
string
controllers.main.containers.main.command[] (1)
string
controllers.main.pod.enableServiceLinks (6)
false
boolean
controllers.main.pod.topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/name" (4)
authelia
string
controllers.main.pod.topologySpreadConstraints[].maxSkew (4)
1
number
controllers.main.pod.topologySpreadConstraints[].topologyKey (4)
kubernetes.io/hostname
string
controllers.main.pod.topologySpreadConstraints[].whenUnsatisfiable (4)
DoNotSchedule
string
controllers.main.pod.securityContext.runAsGroup (3)
568
number
controllers.main.pod.securityContext.runAsUser (3)
568
number
controllers.main.pod.securityContext.fsGroup (1)
number
controllers.main.pod.securityContext.fsGroupChangePolicy (1)
string
controllers.main.pod.podSecurityContext.fsGroup (1)
number
controllers.main.pod.podSecurityContext.fsGroupChangePolicy (1)
string
controllers.main.pod.podSecurityContext.runAsGroup (1)
number
controllers.main.pod.podSecurityContext.runAsUser (1)
number
controllers.main.replicas (6)
2
number
controllers.main.strategy (6)
RollingUpdate
string
controllers.main.initContainers.init-db.envFrom[].secretRef.name (4)
authelia-secret
string
controllers.main.initContainers.init-db.image.repository (4)
string
controllers.main.initContainers.init-db.image.tag (4)
string, number
controllers.main.initContainers.init-db.image.pullPolicy (3)
IfNotPresent
string
controllers.main.initContainers.01-init-db.env.INIT_POSTGRES_DBNAME (1)
string
controllers.main.initContainers.01-init-db.env.INIT_POSTGRES_HOST (1)
string
controllers.main.initContainers.01-init-db.env.INIT_POSTGRES_PASS (1)
string
controllers.main.initContainers.01-init-db.env.INIT_POSTGRES_SUPER_PASS (1)
string
controllers.main.initContainers.01-init-db.env.INIT_POSTGRES_USER (1)
string
controllers.main.initContainers.01-init-db.image.repository (1)
string
controllers.main.initContainers.01-init-db.image.tag (1)
number
controllers.main.initContainers.01-init-db.imagePullPolicy (1)
string
initContainers.01-init-db.envFrom[].secretRef.name (6)
authelia-secret
string
initContainers.01-init-db.image (6)
ghcr.io/onedr0p/postgres-init:14.9
string
initContainers.01-init-db.imagePullPolicy (5)
IfNotPresent
string
initContainers.init-db.image (4)
string
initContainers.init-db.envFrom[].secretRef.name (3)
string
initContainers.init-db.imagePullPolicy (3)
IfNotPresent
string
initContainers.init-db.env[].name (1)
string
initContainers.init-db.env[].value (1)
string
initContainers.init-db.env[].valueFrom.secretKeyRef.key (1)
string
initContainers.init-db.env[].valueFrom.secretKeyRef.name (1)
string
podAnnotations."secret.reloader.stakater.com/reload" (4)
authelia
string
podAnnotations."configmap.reloader.stakater.com/reload" (3)
string
command[] (1)
string
defaultPodOptions.enableServiceLinks (1)
boolean
defaultPodOptions.securityContext.runAsGroup (1)
number
defaultPodOptions.securityContext.runAsUser (1)
number
defaultPodOptions.topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/name" (1)
string
defaultPodOptions.topologySpreadConstraints[].maxSkew (1)
number
defaultPodOptions.topologySpreadConstraints[].topologyKey (1)
string
defaultPodOptions.topologySpreadConstraints[].whenUnsatisfiable (1)
string
global.nameOverride (1)
string
volumeClaimTemplates[].accessMode (1)
string
volumeClaimTemplates[].mountPath (1)
string
volumeClaimTemplates[].name (1)
string
volumeClaimTemplates[].size (1)
string
volumeClaimTemplates[].storageClass (1)
string