authelia helm

Authelia is an open-source authentication and authorization server and portal fulfilling the identity and access management (IAM) role of information security in providing multi-factor authentication and single sign-on (SSO) for your applications via a web portal. It acts as a companion for common reverse proxies.

Install

Install with:

helm repo add app-template oci://ghcr.io/bjw-s-labs/charts/
helm install authelia app-template/app-template -f values.yaml

Examples

See examples from other people.

Top Repositories (5 out of 28)

NameRepoStarsVersionTimestamp
autheliaharaldkoch/kochhaus-home1664.6.22 days ago
autheliaDiaoul/home-ops1094.6.22 days ago
autheliabudimanjojo/home-cluster2434.5.015 days ago
autheliamchestr/home-cluster1554.6.22 months ago
autheliabrettinternet/homeops2123.5.1a year ago

Values

See the most popular values for this chart:

KeyTypes
persistence.config.name (28)
authelia-configmap
string
persistence.config.type (28)
configMap
string
persistence.config.globalMounts[].path (23)
/config/configuration.yaml
string
persistence.config.globalMounts[].subPath (23)
configuration.yaml
string
persistence.config.globalMounts[].readOnly (21)
true
boolean
persistence.config.enabled (11)
true
boolean
persistence.config.advancedMounts.authelia.app[].path (3)
/config/configuration.yaml
string
persistence.config.advancedMounts.authelia.app[].readOnly (3)
true
boolean
persistence.config.advancedMounts.authelia.app[].subPath (3)
configuration.yaml
string
persistence.config.advancedMounts.authelia.authelia[].path (1)
string
persistence.config.advancedMounts.authelia.authelia[].readOnly (1)
boolean
persistence.config.advancedMounts.authelia.authelia[].subPath (1)
string
persistence.config.mountPath (1)
string
persistence.config.readOnly (1)
boolean
persistence.config.subPath (1)
string
persistence.secret-files.name (9)
authelia-files
string
persistence.secret-files.type (9)
secret
string
persistence.secret-files.enabled (8)
true
boolean
persistence.secret-files.globalMounts[].path (6)
/config/secret
string
persistence.secret-files.advancedMounts.authelia.app[].path (3)
/app/secrets
string
persistence.secrets.globalMounts[].path (3)
/config/secrets
string
persistence.secrets.globalMounts[].readOnly (3)
true
boolean
persistence.secrets.name (3)
string
persistence.secrets.type (3)
secret
string
persistence.secrets.enabled (1)
boolean
persistence.trusted-certs.advancedMounts.authelia.app[].path (3)
/trusted_certs/letsencrypt-certs.pem
string
persistence.trusted-certs.advancedMounts.authelia.app[].readOnly (3)
true
boolean
persistence.trusted-certs.advancedMounts.authelia.app[].subPath (3)
letsencrypt-certs.pem
string
persistence.trusted-certs.name (3)
letsencrypt-certs
string
persistence.trusted-certs.type (3)
configMap
string
persistence.data.existingClaim (2)
string
persistence.data.globalMounts[].path (1)
string
persistence.db-secret-files.enabled (2)
boolean
persistence.db-secret-files.globalMounts[].path (2)
string
persistence.db-secret-files.name (2)
string
persistence.db-secret-files.type (2)
string
persistence.dragonfly-secret-files.enabled (2)
boolean
persistence.dragonfly-secret-files.globalMounts[].path (2)
string
persistence.dragonfly-secret-files.name (2)
string
persistence.dragonfly-secret-files.type (2)
string
persistence.anubis.advancedMounts.authelia.anubis[].path (1)
string
persistence.anubis.advancedMounts.authelia.anubis[].readOnly (1)
boolean
persistence.anubis.advancedMounts.authelia.anubis[].subPath (1)
string
persistence.anubis.name (1)
string
persistence.anubis.type (1)
string
persistence.dbsecret.globalMounts[].path (1)
string
persistence.dbsecret.globalMounts[].readOnly (1)
boolean
persistence.dbsecret.name (1)
string
persistence.dbsecret.type (1)
string
persistence.oidc-cert.globalMounts[].path (1)
string
persistence.oidc-cert.name (1)
string
persistence.oidc-cert.type (1)
string
persistence.secret-keys.enabled (1)
boolean
persistence.secret-keys.globalMounts[].path (1)
string
persistence.secret-keys.name (1)
string
persistence.secret-keys.type (1)
string
persistence.users.globalMounts[].path (1)
string
persistence.users.globalMounts[].readOnly (1)
boolean
persistence.users.globalMounts[].subPath (1)
string
persistence.users.name (1)
string
persistence.users.type (1)
string
controllers.authelia.annotations."reloader.stakater.com/auto" (25)
true
string
controllers.authelia.annotations."configmap.reloader.stakater.com/reload" (1)
string
controllers.authelia.annotations."secret.reloader.stakater.com/reload" (1)
string
controllers.authelia.replicas (24)
2
number
controllers.authelia.containers.app.image.repository (23)
ghcr.io/authelia/authelia
string
controllers.authelia.containers.app.image.tag (23)
4.39.15@sha256:d23ee3c721d465b4749cc58541cda4aebe5aa6f19d7b5ce0afebb44ebee69591
string
controllers.authelia.containers.app.probes.liveness.enabled (23)
true
boolean
controllers.authelia.containers.app.probes.liveness.custom (22)
true
boolean
controllers.authelia.containers.app.probes.liveness.spec.failureThreshold (22)
3
number
controllers.authelia.containers.app.probes.liveness.spec.httpGet.path (22)
/api/health
string
controllers.authelia.containers.app.probes.liveness.spec.httpGet.port (22)
80
number
controllers.authelia.containers.app.probes.liveness.spec.initialDelaySeconds (22)
0
number
controllers.authelia.containers.app.probes.liveness.spec.periodSeconds (22)
10
number
controllers.authelia.containers.app.probes.liveness.spec.timeoutSeconds (22)
1
number
controllers.authelia.containers.app.probes.readiness.enabled (23)
true
boolean
controllers.authelia.containers.app.probes.readiness.custom (22)
true
boolean
controllers.authelia.containers.app.probes.readiness.spec.failureThreshold (22)
3
number
controllers.authelia.containers.app.probes.readiness.spec.httpGet.path (22)
/api/health
string
controllers.authelia.containers.app.probes.readiness.spec.httpGet.port (22)
80
number
controllers.authelia.containers.app.probes.readiness.spec.initialDelaySeconds (22)
0
number
controllers.authelia.containers.app.probes.readiness.spec.periodSeconds (22)
10
number
controllers.authelia.containers.app.probes.readiness.spec.timeoutSeconds (22)
1
number
controllers.authelia.containers.app.probes.startup.enabled (7)
false
boolean
controllers.authelia.containers.app.resources.limits.memory (23)
128Mi
string
controllers.authelia.containers.app.resources.requests.cpu (23)
10m
string
controllers.authelia.containers.app.resources.requests.memory (18)
32Mi
string
controllers.authelia.containers.app.envFrom[].secretRef.name (21)
authelia-secret
string
controllers.authelia.containers.app.env.AUTHELIA_SERVER_DISABLE_HEALTHCHECK (20)
true
string, boolean
controllers.authelia.containers.app.env.AUTHELIA_TELEMETRY_METRICS_ADDRESS (20)
tcp://0.0.0.0:8080
string
controllers.authelia.containers.app.env.AUTHELIA_TELEMETRY_METRICS_ENABLED (19)
true
string, boolean
controllers.authelia.containers.app.env.AUTHELIA_THEME (19)
dark
string
controllers.authelia.containers.app.env.AUTHELIA_SERVER_ADDRESS (18)
tcp://0.0.0.0:80
string
controllers.authelia.containers.app.env.X_AUTHELIA_CONFIG (18)
/config/configuration.yaml
string
controllers.authelia.containers.app.env.X_AUTHELIA_CONFIG_FILTERS (18)
template
string
controllers.authelia.containers.app.env.AUTHELIA_LOG_LEVEL (7)
debug
string
controllers.authelia.containers.app.env.AUTHELIA_TOTP_ISSUER (6)
authelia.com
string
controllers.authelia.containers.app.env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_PASSWORD_FILE (4)
/app/secrets/AUTHELIA_AUTHENTICATION_BACKEND_LDAP_PASSWORD
string
controllers.authelia.containers.app.env.AUTHELIA_NOTIFIER_DISABLE_STARTUP_CHECK (4)
true
string
controllers.authelia.containers.app.env.AUTHELIA_SESSION_SECRET_FILE (4)
/app/secrets/AUTHELIA_SESSION_SECRET
string
controllers.authelia.containers.app.env.AUTHELIA_STORAGE_ENCRYPTION_KEY_FILE (4)
/app/secrets/AUTHELIA_STORAGE_ENCRYPTION_KEY
string
controllers.authelia.containers.app.env.AUTHELIA_WEBAUTHN_DISABLE (4)
true
string
controllers.authelia.containers.app.env.TZ (4)
${TIMEZONE}
string
controllers.authelia.containers.app.env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ADDITIONAL_GROUPS_DN (3)
string
controllers.authelia.containers.app.env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ADDITIONAL_USERS_DN (3)
string
controllers.authelia.containers.app.env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_BASE_DN (3)
dc=home,dc=arpa
string
controllers.authelia.containers.app.env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_GROUPS_FILTER (3)
string
controllers.authelia.containers.app.env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_IMPLEMENTATION (3)
custom
string
controllers.authelia.containers.app.env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_START_TLS (3)
false
string
controllers.authelia.containers.app.env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_TIMEOUT (3)
5s
string
controllers.authelia.containers.app.env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_USER.secretKeyRef.key (1)
string
controllers.authelia.containers.app.env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_USER.secretKeyRef.name (1)
string
controllers.authelia.containers.app.env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_USER (3)
string
controllers.authelia.containers.app.env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_USERS_FILTER (3)
string
controllers.authelia.containers.app.env.AUTHELIA_AUTHENTICATION_BACKEND_PASSWORD_RESET_DISABLE (3)
string
controllers.authelia.containers.app.env.AUTHELIA_AUTHENTICATION_BACKEND_REFRESH_INTERVAL (3)
1m
string
controllers.authelia.containers.app.env.AUTHELIA_CERTIFICATES_DIRECTORY (3)
/trusted_certs
string
controllers.authelia.containers.app.env.AUTHELIA_DUO_API_DISABLE (3)
true
string
controllers.authelia.containers.app.env.AUTHELIA_DUO_API_INTEGRATION_KEY_FILE (3)
/app/secrets/AUTHELIA_DUO_API_INTEGRATION_KEY
string
controllers.authelia.containers.app.env.AUTHELIA_DUO_API_SECRET_KEY_FILE (3)
/app/secrets/AUTHELIA_DUO_API_SECRET_KEY
string
controllers.authelia.containers.app.env.AUTHELIA_IDENTITY_PROVIDERS_OIDC_HMAC_SECRET_FILE (3)
/app/secrets/AUTHELIA_IDENTITY_PROVIDERS_OIDC_HMAC_SECRET
string
controllers.authelia.containers.app.env.AUTHELIA_NOTIFIER_SMTP_ADDRESS (3)
string
controllers.authelia.containers.app.env.AUTHELIA_NOTIFIER_SMTP_DISABLE_REQUIRE_TLS (3)
true
string
controllers.authelia.containers.app.env.AUTHELIA_NOTIFIER_SMTP_PASSWORD_FILE (3)
/app/secrets/AUTHELIA_NOTIFIER_SMTP_PASSWORD
string
controllers.authelia.containers.app.env.AUTHELIA_NOTIFIER_SMTP_SENDER (3)
string
controllers.authelia.containers.app.env.AUTHELIA_SERVER_PORT (3)
80
number
controllers.authelia.containers.app.env.AUTHELIA_STORAGE_POSTGRES_PASSWORD_FILE (3)
/app/secrets/AUTHELIA_STORAGE_POSTGRES_PASSWORD
string
controllers.authelia.containers.app.env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ADDRESS (2)
string
controllers.authelia.containers.app.env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ATTRIBUTES_DISPLAY_NAME (2)
string
controllers.authelia.containers.app.env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ATTRIBUTES_GROUP_NAME (2)
string
controllers.authelia.containers.app.env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ATTRIBUTES_MAIL (2)
string
controllers.authelia.containers.app.env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ATTRIBUTES_USERNAME (2)
string
controllers.authelia.containers.app.env.AUTHELIA_SESSION_REDIS_DATABASE_INDEX (2)
number
controllers.authelia.containers.app.env.AUTHELIA_SESSION_REDIS_HOST (2)
string
controllers.authelia.containers.app.env.AUTHELIA_STORAGE_POSTGRES_ADDRESS.valueFrom.secretKeyRef.key (1)
string
controllers.authelia.containers.app.env.AUTHELIA_STORAGE_POSTGRES_ADDRESS.valueFrom.secretKeyRef.name (1)
string
controllers.authelia.containers.app.env.AUTHELIA_STORAGE_POSTGRES_ADDRESS (2)
string
controllers.authelia.containers.app.env.AUTHELIA_STORAGE_POSTGRES_DATABASE.valueFrom.secretKeyRef.key (1)
string
controllers.authelia.containers.app.env.AUTHELIA_STORAGE_POSTGRES_DATABASE.valueFrom.secretKeyRef.name (1)
string
controllers.authelia.containers.app.env.AUTHELIA_STORAGE_POSTGRES_DATABASE (2)
string
controllers.authelia.containers.app.env.AUTHELIA_STORAGE_POSTGRES_PASSWORD.valueFrom.secretKeyRef.key (2)
string
controllers.authelia.containers.app.env.AUTHELIA_STORAGE_POSTGRES_PASSWORD.valueFrom.secretKeyRef.name (2)
string
controllers.authelia.containers.app.env.AUTHELIA_ACCESS_CONTROL_DEFAULT_POLICY (1)
string
controllers.authelia.containers.app.env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ATTRIBUTES_MEMBER_OF (1)
string
controllers.authelia.containers.app.env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_DISPLAY_NAME_ATTRIBUTE (1)
string
controllers.authelia.containers.app.env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_GROUP_NAME_ATTRIBUTE (1)
string
controllers.authelia.containers.app.env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_MAIL_ATTRIBUTE (1)
string
controllers.authelia.containers.app.env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_URL (1)
string
controllers.authelia.containers.app.env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_USERNAME_ATTRIBUTE (1)
string
controllers.authelia.containers.app.env.AUTHELIA_DEFAULT_REDIRECTION_URL (1)
string
controllers.authelia.containers.app.env.AUTHELIA_IDENTITY_VALIDATION_RESET_PASSWORD_JWT_SECRET_FILE (1)
string
controllers.authelia.containers.app.env.AUTHELIA_NOTIFIER_SMTP_HOST (1)
string
controllers.authelia.containers.app.env.AUTHELIA_NOTIFIER_SMTP_PORT (1)
string
controllers.authelia.containers.app.env.AUTHELIA_SERVER_BUFFERS_READ (1)
number
controllers.authelia.containers.app.env.AUTHELIA_SERVER_BUFFERS_WRITE (1)
number
controllers.authelia.containers.app.env.AUTHELIA_SESSION_DOMAIN (1)
string
controllers.authelia.containers.app.env.AUTHELIA_SESSION_NAME (1)
string
controllers.authelia.containers.app.env.AUTHELIA_SESSION_REDIS_PASSWORD.valueFrom.secretKeyRef.key (1)
string
controllers.authelia.containers.app.env.AUTHELIA_SESSION_REDIS_PASSWORD.valueFrom.secretKeyRef.name (1)
string
controllers.authelia.containers.app.env.AUTHELIA_SESSION_REDIS_PORT (1)
number
controllers.authelia.containers.app.env.AUTHELIA_STORAGE_LOCAL_PATH (1)
string
controllers.authelia.containers.app.env.AUTHELIA_STORAGE_POSTGRES_USERNAME.valueFrom.secretKeyRef.key (1)
string
controllers.authelia.containers.app.env.AUTHELIA_STORAGE_POSTGRES_USERNAME.valueFrom.secretKeyRef.name (1)
string
controllers.authelia.containers.app.env.AUTHELIA_STORAGE_POSTGRES_USERNAME (1)
string
controllers.authelia.containers.app.env.AUTHELIA_TOTP_DISABLE (1)
boolean
controllers.authelia.containers.app.env.AUTHELIA_WEBAUTHN_ENABLE_PASSKEY_LOGIN (1)
string
controllers.authelia.containers.app.env.AUTHELIA_WEBAUTHN_EXPERIMENTAL_ENABLE_PASSKEY_UV_TWO_FACTORS (1)
string
controllers.authelia.containers.app.env.CLUSTER_CIDR (1)
string
controllers.authelia.containers.app.env.HOME_CIDR (1)
string
controllers.authelia.containers.app.env.NODE_CIDR (1)
string
controllers.authelia.containers.app.env.SECRET_DOMAIN (1)
string
controllers.authelia.containers.app.env.SECRET_EXTERNAL_DOMAIN (1)
string
controllers.authelia.containers.app.env.SECRET_INTERNAL_DOMAIN (1)
string
controllers.authelia.containers.app.env.SECRET_PUBLIC_DOMAIN (1)
string
controllers.authelia.containers.app.securityContext.allowPrivilegeEscalation (15)
false
boolean
controllers.authelia.containers.app.securityContext.capabilities.drop[] (15)
- ALL
string
controllers.authelia.containers.app.securityContext.readOnlyRootFilesystem (15)
true
boolean
controllers.authelia.containers.app.args[] (4)
string
controllers.authelia.containers.app.command[] (1)
string
controllers.authelia.containers.anubis.env.BIND (2)
string
controllers.authelia.containers.anubis.env.DIFFICULTY (2)
string
controllers.authelia.containers.anubis.env.ED25519_PRIVATE_KEY_HEX.valueFrom.secretKeyRef.key (2)
string
controllers.authelia.containers.anubis.env.ED25519_PRIVATE_KEY_HEX.valueFrom.secretKeyRef.name (2)
string
controllers.authelia.containers.anubis.env.SERVE_ROBOTS_TXT (2)
string
controllers.authelia.containers.anubis.env.TARGET (2)
string
controllers.authelia.containers.anubis.env.TZ (2)
string
controllers.authelia.containers.anubis.env.POLICY_FNAME (1)
string
controllers.authelia.containers.anubis.image.repository (2)
string
controllers.authelia.containers.anubis.image.tag (2)
string
controllers.authelia.containers.anubis.ports[].containerPort (2)
number
controllers.authelia.containers.anubis.ports[].name (2)
string
controllers.authelia.containers.anubis.resources.limits.memory (2)
string
controllers.authelia.containers.anubis.resources.requests.cpu (2)
string
controllers.authelia.containers.anubis.resources.requests.memory (2)
string
controllers.authelia.containers.anubis.securityContext.allowPrivilegeEscalation (2)
boolean
controllers.authelia.containers.anubis.securityContext.capabilities.drop[] (2)
string
controllers.authelia.containers.anubis.securityContext.readOnlyRootFilesystem (2)
boolean
controllers.authelia.containers.authelia.env.AUTHELIA_SERVER_ADDRESS (2)
string
controllers.authelia.containers.authelia.env.AUTHELIA_SERVER_DISABLE_HEALTHCHECK (2)
string
controllers.authelia.containers.authelia.env.AUTHELIA_TELEMETRY_METRICS_ADDRESS (2)
string
controllers.authelia.containers.authelia.env.AUTHELIA_TELEMETRY_METRICS_ENABLED (2)
string
controllers.authelia.containers.authelia.env.AUTHELIA_THEME (2)
string
controllers.authelia.containers.authelia.env.X_AUTHELIA_CONFIG (2)
string
controllers.authelia.containers.authelia.env.X_AUTHELIA_CONFIG_FILTERS (2)
string
controllers.authelia.containers.authelia.envFrom[].secretRef.name (2)
string
controllers.authelia.containers.authelia.image.repository (2)
string
controllers.authelia.containers.authelia.image.tag (2)
string
controllers.authelia.containers.authelia.probes.liveness.custom (2)
boolean
controllers.authelia.containers.authelia.probes.liveness.enabled (2)
boolean
controllers.authelia.containers.authelia.probes.liveness.spec.failureThreshold (2)
number
controllers.authelia.containers.authelia.probes.liveness.spec.httpGet.path (2)
string
controllers.authelia.containers.authelia.probes.liveness.spec.httpGet.port (2)
number
controllers.authelia.containers.authelia.probes.liveness.spec.initialDelaySeconds (2)
number
controllers.authelia.containers.authelia.probes.liveness.spec.periodSeconds (2)
number
controllers.authelia.containers.authelia.probes.liveness.spec.timeoutSeconds (2)
number
controllers.authelia.containers.authelia.probes.readiness.custom (2)
boolean
controllers.authelia.containers.authelia.probes.readiness.enabled (2)
boolean
controllers.authelia.containers.authelia.probes.readiness.spec.failureThreshold (2)
number
controllers.authelia.containers.authelia.probes.readiness.spec.httpGet.path (2)
string
controllers.authelia.containers.authelia.probes.readiness.spec.httpGet.port (2)
number
controllers.authelia.containers.authelia.probes.readiness.spec.initialDelaySeconds (2)
number
controllers.authelia.containers.authelia.probes.readiness.spec.periodSeconds (2)
number
controllers.authelia.containers.authelia.probes.readiness.spec.timeoutSeconds (2)
number
controllers.authelia.containers.authelia.resources.limits.memory (2)
string
controllers.authelia.containers.authelia.resources.requests.cpu (2)
string
controllers.authelia.containers.authelia.resources.requests.memory (2)
string
controllers.authelia.containers.authelia.securityContext.allowPrivilegeEscalation (2)
boolean
controllers.authelia.containers.authelia.securityContext.capabilities.drop[] (2)
string
controllers.authelia.containers.authelia.securityContext.readOnlyRootFilesystem (2)
boolean
controllers.authelia.containers.main.image.repository (1)
string
controllers.authelia.containers.main.image.tag (1)
string
controllers.authelia.containers.main.probes.liveness.enabled (1)
boolean
controllers.authelia.containers.main.probes.readiness.enabled (1)
boolean
controllers.authelia.containers.main.probes.startup.enabled (1)
boolean
controllers.authelia.containers.main.probes.startup.spec.failureThreshold (1)
number
controllers.authelia.containers.main.probes.startup.spec.periodSeconds (1)
number
controllers.authelia.containers.main.resources.requests.cpu (1)
string
controllers.authelia.containers.main.resources.requests.memory (1)
string
controllers.authelia.strategy (23)
RollingUpdate
string
controllers.authelia.initContainers.init-db.image.repository (12)
ghcr.io/home-operations/postgres-init
string
controllers.authelia.initContainers.init-db.image.tag (12)
17.4
number, string
controllers.authelia.initContainers.init-db.image.pullPolicy (3)
IfNotPresent
string
controllers.authelia.initContainers.init-db.envFrom[].secretRef.name (11)
authelia-secret
string
controllers.authelia.initContainers.init-db.env.INIT_POSTGRES_DBNAME (1)
string
controllers.authelia.initContainers.init-db.env.INIT_POSTGRES_HOST (1)
string
controllers.authelia.initContainers.init-db.env.INIT_POSTGRES_PASS.valueFrom.secretKeyRef.key (1)
string
controllers.authelia.initContainers.init-db.env.INIT_POSTGRES_PASS.valueFrom.secretKeyRef.name (1)
string
controllers.authelia.initContainers.init-db.env.INIT_POSTGRES_SUPER_PASS.valueFrom.secretKeyRef.key (1)
string
controllers.authelia.initContainers.init-db.env.INIT_POSTGRES_SUPER_PASS.valueFrom.secretKeyRef.name (1)
string
controllers.authelia.initContainers.init-db.env.INIT_POSTGRES_USER.valueFrom.secretKeyRef.key (1)
string
controllers.authelia.initContainers.init-db.env.INIT_POSTGRES_USER.valueFrom.secretKeyRef.name (1)
string
controllers.authelia.initContainers.init-db.securityContext.allowPrivilegeEscalation (1)
boolean
controllers.authelia.initContainers.init-db.securityContext.capabilities.drop[] (1)
string
controllers.authelia.initContainers.init-db.securityContext.readOnlyRootFilesystem (1)
boolean
controllers.authelia.initContainers.01-init-db.envFrom[].secretRef.name (3)
string
controllers.authelia.initContainers.01-init-db.image.repository (3)
ghcr.io/home-operations/postgres-init
string
controllers.authelia.initContainers.01-init-db.image.tag (3)
string, number
controllers.authelia.pod.securityContext.runAsGroup (11)
568
number
controllers.authelia.pod.securityContext.runAsUser (11)
568
number
controllers.authelia.pod.securityContext.runAsNonRoot (10)
true
boolean
controllers.authelia.pod.securityContext.seccompProfile.type (2)
string
controllers.authelia.pod.securityContext.fsGroup (1)
number
controllers.authelia.pod.securityContext.fsGroupChangePolicy (1)
string
controllers.authelia.pod.topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/name" (9)
authelia
string
controllers.authelia.pod.topologySpreadConstraints[].maxSkew (9)
1
number
controllers.authelia.pod.topologySpreadConstraints[].topologyKey (9)
kubernetes.io/hostname
string
controllers.authelia.pod.topologySpreadConstraints[].whenUnsatisfiable (9)
DoNotSchedule
string
controllers.authelia.pod.enableServiceLinks (3)
false
boolean
controllers.authelia.pod.annotations."k8s.ksgate.org/postgres" (2)
string
controllers.authelia.pod.schedulingGates[].name (2)
string
controllers.authelia.defaultContainerOptions.securityContext.allowPrivilegeEscalation (2)
boolean
controllers.authelia.defaultContainerOptions.securityContext.capabilities.drop[] (2)
string
controllers.authelia.defaultContainerOptions.securityContext.readOnlyRootFilesystem (2)
boolean
controllers.main.annotations."reloader.stakater.com/auto" (1)
string
controllers.main.containers.main.env.AUTHELIA_SERVER_ADDRESS (1)
string
controllers.main.containers.main.env.AUTHELIA_TELEMETRY_METRICS_ADDRESS (1)
string
controllers.main.containers.main.env.X_AUTHELIA_CONFIG (1)
string
controllers.main.containers.main.env.X_AUTHELIA_CONFIG_FILTERS (1)
string
controllers.main.containers.main.envFrom[].secretRef.name (1)
string
controllers.main.containers.main.image.repository (1)
string
controllers.main.containers.main.image.tag (1)
string
controllers.main.containers.main.probes.liveness.custom (1)
boolean
controllers.main.containers.main.probes.liveness.enabled (1)
boolean
controllers.main.containers.main.probes.liveness.spec.failureThreshold (1)
number
controllers.main.containers.main.probes.liveness.spec.httpGet.path (1)
string
controllers.main.containers.main.probes.liveness.spec.httpGet.port (1)
number
controllers.main.containers.main.probes.liveness.spec.initialDelaySeconds (1)
number
controllers.main.containers.main.probes.liveness.spec.periodSeconds (1)
number
controllers.main.containers.main.probes.liveness.spec.timeoutSeconds (1)
number
controllers.main.containers.main.probes.readiness.custom (1)
boolean
controllers.main.containers.main.probes.readiness.enabled (1)
boolean
controllers.main.containers.main.probes.readiness.spec.failureThreshold (1)
number
controllers.main.containers.main.probes.readiness.spec.httpGet.path (1)
string
controllers.main.containers.main.probes.readiness.spec.httpGet.port (1)
number
controllers.main.containers.main.probes.readiness.spec.initialDelaySeconds (1)
number
controllers.main.containers.main.probes.readiness.spec.periodSeconds (1)
number
controllers.main.containers.main.probes.readiness.spec.timeoutSeconds (1)
number
controllers.main.containers.main.probes.startup.enabled (1)
boolean
controllers.main.containers.main.resources.limits.memory (1)
string
controllers.main.containers.main.resources.requests.cpu (1)
string
controllers.main.containers.main.resources.requests.memory (1)
string
controllers.main.initContainers.01-init-db.env.INIT_POSTGRES_DBNAME (1)
string
controllers.main.initContainers.01-init-db.env.INIT_POSTGRES_HOST (1)
string
controllers.main.initContainers.01-init-db.env.INIT_POSTGRES_PASS (1)
string
controllers.main.initContainers.01-init-db.env.INIT_POSTGRES_SUPER_PASS (1)
string
controllers.main.initContainers.01-init-db.env.INIT_POSTGRES_USER (1)
string
controllers.main.initContainers.01-init-db.image.pullPolicy (1)
string
controllers.main.initContainers.01-init-db.image.repository (1)
string
controllers.main.initContainers.01-init-db.image.tag (1)
number
controllers.main.pod.enableServiceLinks (1)
boolean
controllers.main.pod.securityContext.fsGroup (1)
number
controllers.main.pod.securityContext.fsGroupChangePolicy (1)
string
controllers.main.pod.securityContext.runAsGroup (1)
number
controllers.main.pod.securityContext.runAsUser (1)
number
controllers.main.pod.topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/name" (1)
string
controllers.main.pod.topologySpreadConstraints[].maxSkew (1)
number
controllers.main.pod.topologySpreadConstraints[].topologyKey (1)
string
controllers.main.pod.topologySpreadConstraints[].whenUnsatisfiable (1)
string
controllers.main.replicas (1)
number
controllers.main.strategy (1)
string
service.app.ports.http.port (24)
80
number
service.app.ports.http.primary (7)
true
boolean
service.app.ports.http.protocol (1)
string
service.app.ports.metrics.port (23)
8080
number
service.app.ports.metrics.enabled (3)
true
boolean
service.app.ports.metrics.protocol (1)
string
service.app.ports.anubis.port (1)
number
service.app.controller (21)
authelia
string
service.app.ipFamilyPolicy (4)
PreferDualStack
string
service.main.ports.http.port (3)
number
service.main.ports.metrics.enabled (2)
boolean
service.main.ports.metrics.port (2)
number
service.main.controller (2)
string
service.authelia.controller (1)
string
service.authelia.ports.anubis.port (1)
number
service.authelia.ports.http.port (1)
number
serviceMonitor.app.endpoints[].port (24)
metrics
string
serviceMonitor.app.endpoints[].path (17)
/metrics
string
serviceMonitor.app.endpoints[].interval (16)
1m
string
serviceMonitor.app.endpoints[].scheme (16)
http
string
serviceMonitor.app.endpoints[].scrapeTimeout (16)
10s
string
serviceMonitor.app.serviceName (23)
authelia
string
serviceMonitor.app.enabled (5)
true
boolean
serviceMonitor.main.enabled (1)
boolean
serviceMonitor.main.endpoints[].interval (1)
string
serviceMonitor.main.endpoints[].path (1)
string
serviceMonitor.main.endpoints[].port (1)
string
serviceMonitor.main.endpoints[].scheme (1)
string
serviceMonitor.main.endpoints[].scrapeTimeout (1)
string
serviceMonitor.main.serviceName (1)
string
defaultPodOptions.securityContext.runAsGroup (15)
65534
number
defaultPodOptions.securityContext.runAsUser (15)
65534
number
defaultPodOptions.securityContext.runAsNonRoot (14)
true
boolean
defaultPodOptions.securityContext.seccompProfile.type (9)
RuntimeDefault
string
defaultPodOptions.securityContext.fsGroupChangePolicy (6)
OnRootMismatch
string
defaultPodOptions.securityContext.fsGroup (4)
number
defaultPodOptions.topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/name" (7)
authelia
string
defaultPodOptions.topologySpreadConstraints[].maxSkew (7)
1
number
defaultPodOptions.topologySpreadConstraints[].topologyKey (7)
kubernetes.io/hostname
string
defaultPodOptions.topologySpreadConstraints[].whenUnsatisfiable (7)
DoNotSchedule
string
defaultPodOptions.enableServiceLinks (5)
false
boolean
defaultPodOptions.automountServiceAccountToken (3)
false
boolean
defaultPodOptions.hostIPC (1)
boolean
defaultPodOptions.hostNetwork (1)
boolean
defaultPodOptions.hostPID (1)
boolean
defaultPodOptions.shareProcessNamespace (1)
boolean
route.app.hostnames[] (15)
- auth.${SECRET_DOMAIN}
string
route.app.parentRefs[].name (15)
envoy-external
string
route.app.parentRefs[].namespace (15)
network
string
route.app.parentRefs[].sectionName (11)
https
string
route.app.rules[].backendRefs[].port (8)
80
number, string
route.app.rules[].backendRefs[].identifier (4)
app
string
route.app.rules[].backendRefs[].name (4)
authelia
string
route.app.rules[].filters[].requestHeaderModifier.set[].name (1)
string
route.app.rules[].filters[].requestHeaderModifier.set[].value (1)
string
route.app.rules[].filters[].type (1)
string
route.app.annotations."gatus.home-operations.com/endpoint" (2)
string
route.app.annotations."gethomepage.dev/description" (2)
string
route.app.annotations."gethomepage.dev/enabled" (2)
string
route.app.annotations."gethomepage.dev/group" (2)
string
route.app.annotations."gethomepage.dev/icon" (2)
string
route.app.annotations."gethomepage.dev/name" (2)
string
route.app.annotations."gethomepage.dev/app" (1)
string
route.main.hostnames[] (2)
string
route.main.parentRefs[].name (2)
string
route.main.parentRefs[].namespace (2)
string
route.main.parentRefs[].sectionName (1)
string
route.main.annotations."gethomepage.dev/enabled" (1)
string
route.main.annotations."gethomepage.dev/group" (1)
string
route.main.annotations."gethomepage.dev/icon" (1)
string
route.main.rules[].backendRefs[].name (1)
string
route.main.rules[].backendRefs[].port (1)
number
route.authelia.hostnames[] (1)
string
route.authelia.parentRefs[].name (1)
string
route.authelia.parentRefs[].namespace (1)
string
route.authelia.rules[].backendRefs[].identifier (1)
string
route.authelia.rules[].backendRefs[].port (1)
string
route.internal.hostnames[] (1)
string
route.internal.parentRefs[].name (1)
string
route.internal.parentRefs[].namespace (1)
string
ingress.app.className (8)
external
string
ingress.app.hosts[].host (8)
auth.${SECRET_DOMAIN}
string
ingress.app.hosts[].paths[].path (8)
/
string
ingress.app.hosts[].paths[].service.identifier (8)
app
string
ingress.app.hosts[].paths[].service.port (8)
http
string, number
ingress.app.annotations."external-dns.alpha.kubernetes.io/target" (6)
external.${SECRET_DOMAIN}
string
ingress.app.annotations."nginx.ingress.kubernetes.io/configuration-snippet" (5)
add_header Cache-Control "no-store"; add_header Pragma "no-cache"; add_header X-Frame-Options "SAMEORIGIN"; add_header X-XSS-Protection "1; mode=block";
string
ingress.app.annotations."hajimari.io/icon" (2)
string
ingress.app.annotations."gethomepage.dev/enabled" (1)
string
ingress.app.annotations."gethomepage.dev/group" (1)
string
ingress.app.annotations."gethomepage.dev/icon" (1)
string
ingress.app.annotations."gethomepage.dev/name" (1)
string
ingress.app.annotations."nginx.ingress.kubernetes.io/add-header-Cache-Control" (1)
string
ingress.app.annotations."nginx.ingress.kubernetes.io/add-header-Pragma" (1)
string
ingress.app.annotations."nginx.ingress.kubernetes.io/add-header-X-Frame-Options" (1)
string
ingress.app.annotations."nginx.ingress.kubernetes.io/add-header-X-XSS-Protection" (1)
string
ingress.app.annotations."nginx.org/proxy-set-headers" (1)
string
ingress.app.tls[].hosts[] (2)
string
ingress.app.enabled (1)
boolean
ingress.main.annotations."hajimari.io/icon" (2)
string
ingress.main.annotations."nginx.ingress.kubernetes.io/configuration-snippet" (2)
string
ingress.main.annotations."external-dns.alpha.kubernetes.io/target" (1)
string
ingress.main.annotations."external-dns.home.arpa/enabled" (1)
string
ingress.main.annotations."hajimari.io/enable" (1)
string
ingress.main.annotations."hajimari.io/group" (1)
string
ingress.main.annotations."hajimari.io/name" (1)
string
ingress.main.enabled (2)
boolean
ingress.main.hosts[].host (2)
string
ingress.main.hosts[].paths[].path (2)
string
ingress.main.hosts[].paths[].pathType (2)
string
ingress.main.hosts[].paths[].service.identifier (1)
string
ingress.main.hosts[].paths[].service.port (1)
string
ingress.main.className (1)
string
ingress.main.ingressClassName (1)
string
ingress.main.tls[].hosts[] (1)
string
enableServiceLinks (2)
boolean
args[] (1)
string
controller.annotations."reloader.stakater.com/auto" (1)
string
controller.replicas (1)
number
controller.strategy (1)
string
env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ADDITIONAL_GROUPS_DN (1)
string
env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ADDITIONAL_USERS_DN (1)
string
env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ADDRESS (1)
string
env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ATTRIBUTES_DISPLAY_NAME (1)
string
env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ATTRIBUTES_GROUP_NAME (1)
string
env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ATTRIBUTES_MAIL (1)
string
env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ATTRIBUTES_USERNAME (1)
string
env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_BASE_DN (1)
string
env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_GROUPS_FILTER (1)
string
env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_IMPLEMENTATION (1)
string
env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_START_TLS (1)
string
env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_TIMEOUT (1)
string
env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_USER (1)
string
env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_USERS_FILTER (1)
string
env.AUTHELIA_AUTHENTICATION_BACKEND_PASSWORD_RESET_DISABLE (1)
string
env.AUTHELIA_DEFAULT_REDIRECTION_URL (1)
string
env.AUTHELIA_DUO_API_DISABLE (1)
string
env.AUTHELIA_LOG_LEVEL (1)
string
env.AUTHELIA_NOTIFIER_DISABLE_STARTUP_CHECK (1)
string
env.AUTHELIA_NOTIFIER_SMTP_SENDER (1)
string
env.AUTHELIA_SERVER_ADDRESS (1)
string
env.AUTHELIA_SERVER_DISABLE_HEALTHCHECK (1)
string
env.AUTHELIA_SESSION_DOMAIN (1)
string
env.AUTHELIA_SESSION_REDIS_DATABASE_INDEX (1)
number
env.AUTHELIA_SESSION_REDIS_HOST (1)
string
env.AUTHELIA_STORAGE_POSTGRES_ADDRESS (1)
string
env.AUTHELIA_STORAGE_POSTGRES_DATABASE.valueFrom.secretKeyRef.key (1)
string
env.AUTHELIA_STORAGE_POSTGRES_DATABASE.valueFrom.secretKeyRef.name (1)
string
env.AUTHELIA_STORAGE_POSTGRES_PASSWORD.valueFrom.secretKeyRef.key (1)
string
env.AUTHELIA_STORAGE_POSTGRES_PASSWORD.valueFrom.secretKeyRef.name (1)
string
env.AUTHELIA_STORAGE_POSTGRES_USERNAME.valueFrom.secretKeyRef.key (1)
string
env.AUTHELIA_STORAGE_POSTGRES_USERNAME.valueFrom.secretKeyRef.name (1)
string
env.AUTHELIA_TELEMETRY_METRICS_ADDRESS (1)
string
env.AUTHELIA_TELEMETRY_METRICS_ENABLED (1)
string
env.AUTHELIA_THEME (1)
string
env.AUTHELIA_TOTP_ISSUER (1)
string
env.AUTHELIA_WEBAUTHN_DISABLE (1)
string
envFrom[].secretRef.name (1)
string
image.repository (1)
string
image.tag (1)
string
podSecurityContext.fsGroup (1)
number
podSecurityContext.fsGroupChangePolicy (1)
string
podSecurityContext.runAsGroup (1)
number
podSecurityContext.runAsUser (1)
number
probes.liveness.custom (1)
boolean
probes.liveness.enabled (1)
boolean
probes.liveness.spec.failureThreshold (1)
number
probes.liveness.spec.httpGet.path (1)
string
probes.liveness.spec.httpGet.port (1)
number
probes.liveness.spec.initialDelaySeconds (1)
number
probes.liveness.spec.periodSeconds (1)
number
probes.liveness.spec.timeoutSeconds (1)
number
probes.readiness.custom (1)
boolean
probes.readiness.enabled (1)
boolean
probes.readiness.spec.failureThreshold (1)
number
probes.readiness.spec.httpGet.path (1)
string
probes.readiness.spec.httpGet.port (1)
number
probes.readiness.spec.initialDelaySeconds (1)
number
probes.readiness.spec.periodSeconds (1)
number
probes.readiness.spec.timeoutSeconds (1)
number
probes.startup.enabled (1)
boolean
rbac.bindings.secret-reader-binding.roleRef.identifier (1)
string
rbac.bindings.secret-reader-binding.subjects[].identifier (1)
string
rbac.bindings.secret-reader-binding.type (1)
string
rbac.roles.secret-reader.rules[].apiGroups[] (1)
string
rbac.roles.secret-reader.rules[].resources[] (1)
string
rbac.roles.secret-reader.rules[].verbs[] (1)
string
rbac.roles.secret-reader.type (1)
string
resources.limits.memory (1)
string
resources.requests.cpu (1)
string
resources.requests.memory (1)
string
topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/name" (1)
string
topologySpreadConstraints[].maxSkew (1)
number
topologySpreadConstraints[].topologyKey (1)
string
topologySpreadConstraints[].whenUnsatisfiable (1)
string