authelia helm

Authelia is an open-source authentication and authorization server and portal fulfilling the identity and access management (IAM) role of information security in providing multi-factor authentication and single sign-on (SSO) for your applications via a web portal. It acts as a companion for common reverse proxies.

Install

Install with:

helm repo add app-template oci://ghcr.io/bjw-s-labs/charts/
helm install authelia app-template/app-template -f values.yaml

Examples

See examples from other people.

Top Repositories (3 out of 15)

NameRepoStarsVersionTimestamp
autheliaadampetrovic/home-ops315.3.010 days ago
autheliamchestr/home-cluster1775.3.0a month ago
autheliaDiaoul/home-ops1205.3.02 months ago

Values

See the most popular values for this chart:

KeyTypes
persistence.config.name (15)
authelia-config
string
persistence.config.type (15)
configMap
string
persistence.config.globalMounts[].path (12)
/config/configuration.yaml
string
persistence.config.globalMounts[].subPath (12)
configuration.yaml
string
persistence.config.globalMounts[].readOnly (8)
true
boolean
persistence.config.enabled (6)
true
boolean
persistence.config.advancedMounts.authelia.app[].path (2)
/config/configuration.yaml
string
persistence.config.advancedMounts.authelia.app[].readOnly (2)
true
boolean
persistence.config.advancedMounts.authelia.app[].subPath (2)
configuration.yaml
string
persistence.config.advancedMounts.authelia.authelia[].path (1)
/config/configuration.yaml
string
persistence.config.advancedMounts.authelia.authelia[].readOnly (1)
true
boolean
persistence.config.advancedMounts.authelia.authelia[].subPath (1)
configuration.yaml
string
persistence.secret-files.name (3)
authelia-files
string
persistence.secret-files.type (3)
secret
string
persistence.secret-files.advancedMounts.authelia.app[].path (2)
/app/secrets
string
persistence.secret-files.enabled (2)
true
boolean
persistence.secret-files.globalMounts[].path (1)
/config/secret
string
persistence.clients.globalMounts[].path (2)
/secrets/clients.yml
string
persistence.clients.globalMounts[].subPath (2)
clients.yml
string
persistence.clients.name (2)
authelia-secret
string
persistence.clients.type (2)
secret
string
persistence.data.existingClaim (2)
${PVC_NAME}
string
persistence.data.globalMounts[].path (1)
/data
string
persistence.jwks.globalMounts[].path (2)
/secrets/jwks.yml
string
persistence.jwks.globalMounts[].subPath (2)
jwks.yml
string
persistence.jwks.name (2)
authelia-secret
string
persistence.jwks.type (2)
secret
string
persistence.secrets.globalMounts[].path (2)
/config/secrets
string
persistence.secrets.globalMounts[].readOnly (2)
true
boolean
persistence.secrets.name (2)
authelia
string
persistence.secrets.type (2)
secret
string
persistence.secrets.enabled (1)
true
boolean
persistence.tmp.globalMounts[].path (2)
/tmp
string
persistence.tmp.type (2)
emptyDir
string
persistence.trusted-certs.advancedMounts.authelia.app[].path (2)
/trusted_certs/letsencrypt-certs.pem
string
persistence.trusted-certs.advancedMounts.authelia.app[].readOnly (2)
true
boolean
persistence.trusted-certs.advancedMounts.authelia.app[].subPath (2)
letsencrypt-certs.pem
string
persistence.trusted-certs.name (2)
letsencrypt-certs
string
persistence.trusted-certs.type (2)
configMap
string
persistence.ldap-ca.enabled (1)
true
boolean
persistence.ldap-ca.globalMounts[].path (1)
/config/certs/lldap-ca.crt
string
persistence.ldap-ca.globalMounts[].readOnly (1)
true
boolean
persistence.ldap-ca.globalMounts[].subPath (1)
ca.crt
string
persistence.ldap-ca.name (1)
lldap-server-tls
string
persistence.ldap-ca.type (1)
secret
string
persistence.oidc-cert-jwk-ecdsa.advancedMounts.authelia.authelia[].path (1)
/secrets/jwk-ecdsa
string
persistence.oidc-cert-jwk-ecdsa.enabled (1)
true
boolean
persistence.oidc-cert-jwk-ecdsa.name (1)
authelia-jwk-ecdsa
string
persistence.oidc-cert-jwk-ecdsa.type (1)
secret
string
persistence.oidc-cert-jwk-rsa.advancedMounts.authelia.authelia[].path (1)
/secrets/jwk-rsa
string
persistence.oidc-cert-jwk-rsa.enabled (1)
true
boolean
persistence.oidc-cert-jwk-rsa.name (1)
authelia-jwk-rsa
string
persistence.oidc-cert-jwk-rsa.type (1)
secret
string
persistence.oidc-cert.globalMounts[].path (1)
/oidc
string
persistence.oidc-cert.name (1)
authelia-oidc-tls
string
persistence.oidc-cert.type (1)
secret
string
persistence.oidc-client-secrets.globalMounts[].path (1)
/oidc/clients
string
persistence.oidc-client-secrets.name (1)
authelia-oidc-client-secrets
string
persistence.oidc-client-secrets.type (1)
secret
string
persistence.oidc-clients-config.advancedMounts.authelia.authelia[].path (1)
/config/clients-config.yaml
string
persistence.oidc-clients-config.advancedMounts.authelia.authelia[].readOnly (1)
true
boolean
persistence.oidc-clients-config.advancedMounts.authelia.authelia[].subPath (1)
configuration.yaml
string
persistence.oidc-clients-config.name (1)
authelia-clients-config
string
persistence.oidc-clients-config.type (1)
configMap
string
persistence.oidc-clients-secrets.advancedMounts.authelia.authelia[].path (1)
/secrets/clients
string
persistence.oidc-clients-secrets.name (1)
authelia-oidc-clients
string
persistence.oidc-clients-secrets.type (1)
secret
string
persistence.oidc-config.advancedMounts.authelia.app[].path (1)
/config/authelia.oidc.yaml
string
persistence.oidc-config.advancedMounts.authelia.app[].readOnly (1)
true
boolean
persistence.oidc-config.advancedMounts.authelia.app[].subPath (1)
authelia.oidc.yaml
string
persistence.oidc-config.name (1)
default-oidc
string
persistence.oidc-config.type (1)
secret
string
persistence.users.globalMounts[].path (1)
/config/users.yaml
string
persistence.users.globalMounts[].readOnly (1)
true
boolean
persistence.users.globalMounts[].subPath (1)
users.yaml
string
persistence.users.name (1)
authelia-users
string
persistence.users.type (1)
secret
string
controllers.authelia.annotations."reloader.stakater.com/auto" (13)
true
string
controllers.authelia.annotations."kubectl.kubernetes.io/default-container" (1)
app
string
controllers.authelia.containers.app.image.repository (12)
ghcr.io/authelia/authelia
string
controllers.authelia.containers.app.image.tag (12)
4.39.28@sha256:bd97cff4fcbf715b5ff1f9ae286afbe6033afce385302520b0368122d43a6f54
string
controllers.authelia.containers.app.probes.liveness.custom (12)
true
boolean
controllers.authelia.containers.app.probes.liveness.enabled (12)
true
boolean
controllers.authelia.containers.app.probes.liveness.spec.failureThreshold (12)
3
number
controllers.authelia.containers.app.probes.liveness.spec.httpGet.path (12)
/api/health
string
controllers.authelia.containers.app.probes.liveness.spec.httpGet.port (12)
80
number
controllers.authelia.containers.app.probes.liveness.spec.periodSeconds (12)
10
number
controllers.authelia.containers.app.probes.liveness.spec.timeoutSeconds (12)
1
number
controllers.authelia.containers.app.probes.liveness.spec.initialDelaySeconds (11)
0
number
controllers.authelia.containers.app.probes.readiness.custom (12)
true
boolean
controllers.authelia.containers.app.probes.readiness.enabled (12)
true
boolean
controllers.authelia.containers.app.probes.readiness.spec.failureThreshold (12)
3
number
controllers.authelia.containers.app.probes.readiness.spec.httpGet.path (12)
/api/health
string
controllers.authelia.containers.app.probes.readiness.spec.httpGet.port (12)
80
number
controllers.authelia.containers.app.probes.readiness.spec.periodSeconds (12)
10
number
controllers.authelia.containers.app.probes.readiness.spec.timeoutSeconds (12)
1
number
controllers.authelia.containers.app.probes.readiness.spec.initialDelaySeconds (11)
0
number
controllers.authelia.containers.app.probes.startup.enabled (6)
false
boolean
controllers.authelia.containers.app.probes.startup.custom (3)
true
boolean
controllers.authelia.containers.app.probes.startup.spec.failureThreshold (3)
60
number
controllers.authelia.containers.app.probes.startup.spec.httpGet.path (3)
/api/health
string
controllers.authelia.containers.app.probes.startup.spec.httpGet.port (3)
9091
number
controllers.authelia.containers.app.probes.startup.spec.periodSeconds (3)
5
number
controllers.authelia.containers.app.probes.startup.spec.timeoutSeconds (3)
2
number
controllers.authelia.containers.app.probes.startup.spec.initialDelaySeconds (2)
0
number
controllers.authelia.containers.app.resources.limits.memory (12)
128Mi
string
controllers.authelia.containers.app.resources.requests.cpu (12)
10m
string
controllers.authelia.containers.app.resources.requests.memory (11)
52Mi
string
controllers.authelia.containers.app.envFrom[].secretRef.name (11)
authelia-secret
string
controllers.authelia.containers.app.env.AUTHELIA_TELEMETRY_METRICS_ADDRESS (9)
tcp://0.0.0.0:8080
string
controllers.authelia.containers.app.env.AUTHELIA_SERVER_ADDRESS (8)
tcp://0.0.0.0:80
string
controllers.authelia.containers.app.env.AUTHELIA_SERVER_DISABLE_HEALTHCHECK (8)
true
string, boolean
controllers.authelia.containers.app.env.AUTHELIA_TELEMETRY_METRICS_ENABLED (8)
true
string, boolean
controllers.authelia.containers.app.env.AUTHELIA_THEME (8)
dark
string
controllers.authelia.containers.app.env.X_AUTHELIA_CONFIG (7)
/config/configuration.yaml
string
controllers.authelia.containers.app.env.X_AUTHELIA_CONFIG_FILTERS (6)
template
string
controllers.authelia.containers.app.env.TZ (4)
${TIMEZONE}
string
controllers.authelia.containers.app.env.AUTHELIA_LOG_LEVEL (3)
debug
string
controllers.authelia.containers.app.env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_PASSWORD_FILE (2)
/app/secrets/AUTHELIA_AUTHENTICATION_BACKEND_LDAP_PASSWORD
string
controllers.authelia.containers.app.env.AUTHELIA_CERTIFICATES_DIRECTORY (2)
/trusted_certs
string
controllers.authelia.containers.app.env.AUTHELIA_DUO_API_DISABLE (2)
true
string
controllers.authelia.containers.app.env.AUTHELIA_DUO_API_INTEGRATION_KEY_FILE (2)
/app/secrets/AUTHELIA_DUO_API_INTEGRATION_KEY
string
controllers.authelia.containers.app.env.AUTHELIA_DUO_API_SECRET_KEY_FILE (2)
/app/secrets/AUTHELIA_DUO_API_SECRET_KEY
string
controllers.authelia.containers.app.env.AUTHELIA_IDENTITY_PROVIDERS_OIDC_HMAC_SECRET_FILE (2)
/app/secrets/AUTHELIA_IDENTITY_PROVIDERS_OIDC_HMAC_SECRET
string
controllers.authelia.containers.app.env.AUTHELIA_NOTIFIER_DISABLE_STARTUP_CHECK (2)
true
string
controllers.authelia.containers.app.env.AUTHELIA_NOTIFIER_SMTP_ADDRESS (2)
smtp-relay.network.svc.cluster.local:25
string
controllers.authelia.containers.app.env.AUTHELIA_NOTIFIER_SMTP_DISABLE_REQUIRE_TLS (2)
true
string
controllers.authelia.containers.app.env.AUTHELIA_NOTIFIER_SMTP_PASSWORD_FILE (2)
/app/secrets/AUTHELIA_NOTIFIER_SMTP_PASSWORD
string
controllers.authelia.containers.app.env.AUTHELIA_SERVER_PORT (2)
80
number
controllers.authelia.containers.app.env.AUTHELIA_SESSION_SECRET_FILE (2)
/app/secrets/AUTHELIA_SESSION_SECRET
string
controllers.authelia.containers.app.env.AUTHELIA_STORAGE_ENCRYPTION_KEY_FILE (2)
/app/secrets/AUTHELIA_STORAGE_ENCRYPTION_KEY
string
controllers.authelia.containers.app.env.AUTHELIA_STORAGE_POSTGRES_PASSWORD_FILE (2)
/app/secrets/AUTHELIA_STORAGE_POSTGRES_PASSWORD
string
controllers.authelia.containers.app.env.AUTHELIA_TOTP_ISSUER (2)
authelia.com
string
controllers.authelia.containers.app.env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ADDITIONAL_GROUPS_DN (1)
ou=groups
string
controllers.authelia.containers.app.env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ADDITIONAL_USERS_DN (1)
ou=people
string
controllers.authelia.containers.app.env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ADDRESS (1)
ldap://lldap.security.svc.cluster.local:389
string
controllers.authelia.containers.app.env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ATTRIBUTES_DISPLAY_NAME (1)
displayName
string
controllers.authelia.containers.app.env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ATTRIBUTES_GROUP_NAME (1)
cn
string
controllers.authelia.containers.app.env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ATTRIBUTES_MAIL (1)
mail
string
controllers.authelia.containers.app.env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ATTRIBUTES_USERNAME (1)
uid
string
controllers.authelia.containers.app.env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_BASE_DN (1)
dc=home,dc=arpa
string
controllers.authelia.containers.app.env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_GROUPS_FILTER (1)
(member={dn})
string
controllers.authelia.containers.app.env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_IMPLEMENTATION (1)
custom
string
controllers.authelia.containers.app.env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_START_TLS (1)
false
string
controllers.authelia.containers.app.env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_TIMEOUT (1)
5s
string
controllers.authelia.containers.app.env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_USER (1)
uid=admin,ou=people,dc=home,dc=arpa
string
controllers.authelia.containers.app.env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_USERS_FILTER (1)
(&({username_attribute}={input})(objectClass=person))
string
controllers.authelia.containers.app.env.AUTHELIA_AUTHENTICATION_BACKEND_PASSWORD_RESET_DISABLE (1)
true
string
controllers.authelia.containers.app.env.AUTHELIA_AUTHENTICATION_BACKEND_REFRESH_INTERVAL (1)
1m
string
controllers.authelia.containers.app.env.AUTHELIA_NOTIFIER_SMTP_SENDER (1)
Authelia <authelia@petrovic.network>
string
controllers.authelia.containers.app.env.AUTHELIA_NOTIFIER_SMTP_TLS_SERVER_NAME (1)
smtp.petrovic.network
string
controllers.authelia.containers.app.env.AUTHELIA_SESSION_REDIS_PASSWORD_FILE (1)
/app/secrets/AUTHELIA_SESSION_REDIS_PASSWORD
string
controllers.authelia.containers.app.env.AUTHELIA_STORAGE_POSTGRES_ADDRESS.valueFrom.secretKeyRef.key (1)
host
string
controllers.authelia.containers.app.env.AUTHELIA_STORAGE_POSTGRES_ADDRESS.valueFrom.secretKeyRef.name (1)
authelia-pguser-secret
string
controllers.authelia.containers.app.env.AUTHELIA_STORAGE_POSTGRES_DATABASE.valueFrom.secretKeyRef.key (1)
db
string
controllers.authelia.containers.app.env.AUTHELIA_STORAGE_POSTGRES_DATABASE.valueFrom.secretKeyRef.name (1)
authelia-pguser-secret
string
controllers.authelia.containers.app.env.AUTHELIA_STORAGE_POSTGRES_PASSWORD.valueFrom.secretKeyRef.key (1)
password
string
controllers.authelia.containers.app.env.AUTHELIA_STORAGE_POSTGRES_PASSWORD.valueFrom.secretKeyRef.name (1)
authelia-pguser-secret
string
controllers.authelia.containers.app.env.AUTHELIA_STORAGE_POSTGRES_USERNAME.valueFrom.secretKeyRef.key (1)
user
string
controllers.authelia.containers.app.env.AUTHELIA_STORAGE_POSTGRES_USERNAME.valueFrom.secretKeyRef.name (1)
authelia-pguser-secret
string
controllers.authelia.containers.app.env.AUTHELIA_WEBAUTHN_DISABLE (1)
false
string
controllers.authelia.containers.app.env.AUTHELIA_WEBAUTHN_ENABLE_PASSKEY_LOGIN (1)
true
string
controllers.authelia.containers.app.env.AUTHELIA_WEBAUTHN_EXPERIMENTAL_ENABLE_PASSKEY_UV_TWO_FACTORS (1)
true
string
controllers.authelia.containers.app.env.AUTHELIA_WEBAUTHN_SELECTION_CRITERIA_DISCOVERABILITY (1)
required
string
controllers.authelia.containers.app.env.AUTHELIA_WEBAUTHN_SELECTION_CRITERIA_USER_VERIFICATION (1)
required
string
controllers.authelia.containers.app.env.SECRET_PUBLIC_DOMAIN (1)
${SECRET_PUBLIC_DOMAIN}
string
controllers.authelia.containers.app.securityContext.allowPrivilegeEscalation (8)
false
boolean
controllers.authelia.containers.app.securityContext.capabilities.drop[] (8)
- ALL
string
controllers.authelia.containers.app.securityContext.readOnlyRootFilesystem (8)
true
boolean
controllers.authelia.containers.app.args[] (5)
- --config
- /config/configuration.yml,/secrets/jwks.yml,/secrets/clients.yml
string
controllers.authelia.containers.authelia.env.X_AUTHELIA_CONFIG (2)
/config/configuration.yaml,/config/clients-config.yaml
string
controllers.authelia.containers.authelia.env.X_AUTHELIA_CONFIG_FILTERS (2)
template
string
controllers.authelia.containers.authelia.env.AUTHELIA_SERVER_ADDRESS (1)
tcp://:80
string
controllers.authelia.containers.authelia.env.AUTHELIA_SERVER_DISABLE_HEALTHCHECK (1)
true
string
controllers.authelia.containers.authelia.env.AUTHELIA_TELEMETRY_METRICS_ADDRESS (1)
tcp://0.0.0.0:8080
string
controllers.authelia.containers.authelia.env.AUTHELIA_TELEMETRY_METRICS_ENABLED (1)
true
string
controllers.authelia.containers.authelia.env.AUTHELIA_THEME (1)
dark
string
controllers.authelia.containers.authelia.envFrom[].secretRef.name (2)
authelia-secret
authelia-pg-secret
valkey-auth-secret
string
controllers.authelia.containers.authelia.image.repository (2)
ghcr.io/authelia/authelia
string
controllers.authelia.containers.authelia.image.tag (2)
4.39.28@sha256:bd97cff4fcbf715b5ff1f9ae286afbe6033afce385302520b0368122d43a6f54
string
controllers.authelia.containers.authelia.probes.liveness.enabled (2)
true
boolean
controllers.authelia.containers.authelia.probes.liveness.custom (1)
true
boolean
controllers.authelia.containers.authelia.probes.liveness.spec.failureThreshold (1)
3
number
controllers.authelia.containers.authelia.probes.liveness.spec.httpGet.path (1)
/api/health
string
controllers.authelia.containers.authelia.probes.liveness.spec.httpGet.port (1)
80
number
controllers.authelia.containers.authelia.probes.liveness.spec.initialDelaySeconds (1)
0
number
controllers.authelia.containers.authelia.probes.liveness.spec.periodSeconds (1)
10
number
controllers.authelia.containers.authelia.probes.liveness.spec.timeoutSeconds (1)
1
number
controllers.authelia.containers.authelia.probes.readiness.enabled (2)
true
boolean
controllers.authelia.containers.authelia.probes.readiness.custom (1)
true
boolean
controllers.authelia.containers.authelia.probes.readiness.spec.failureThreshold (1)
3
number
controllers.authelia.containers.authelia.probes.readiness.spec.httpGet.path (1)
/api/health
string
controllers.authelia.containers.authelia.probes.readiness.spec.httpGet.port (1)
80
number
controllers.authelia.containers.authelia.probes.readiness.spec.initialDelaySeconds (1)
0
number
controllers.authelia.containers.authelia.probes.readiness.spec.periodSeconds (1)
10
number
controllers.authelia.containers.authelia.probes.readiness.spec.timeoutSeconds (1)
1
number
controllers.authelia.containers.authelia.resources.limits.memory (2)
128Mi
string
controllers.authelia.containers.authelia.resources.requests.cpu (2)
10m
string
controllers.authelia.containers.authelia.resources.requests.memory (2)
128Mi
string
controllers.authelia.containers.authelia.securityContext.allowPrivilegeEscalation (2)
false
boolean
controllers.authelia.containers.authelia.securityContext.capabilities.drop[] (2)
- ALL
string
controllers.authelia.containers.authelia.securityContext.readOnlyRootFilesystem (2)
true
boolean
controllers.authelia.containers.anubis.env.BIND (1)
:8923
string
controllers.authelia.containers.anubis.env.DIFFICULTY (1)
4
string
controllers.authelia.containers.anubis.env.ED25519_PRIVATE_KEY_HEX.valueFrom.secretKeyRef.key (1)
ED25519_PRIVATE_KEY_HEX
string
controllers.authelia.containers.anubis.env.ED25519_PRIVATE_KEY_HEX.valueFrom.secretKeyRef.name (1)
anubis-key-authelia
string
controllers.authelia.containers.anubis.env.SERVE_ROBOTS_TXT (1)
true
string
controllers.authelia.containers.anubis.env.TARGET (1)
http://localhost:80
string
controllers.authelia.containers.anubis.env.TZ (1)
${TIMEZONE}
string
controllers.authelia.containers.anubis.image.repository (1)
ghcr.io/techarohq/anubis
string
controllers.authelia.containers.anubis.image.tag (1)
v1.28.2@sha256:5fcbce70ee6168be5b226d19bec90111d0acd0daf13028fa06b044cf3ebbbd5f
string
controllers.authelia.containers.anubis.ports[].containerPort (1)
80
8080
8923
number
controllers.authelia.containers.anubis.ports[].name (1)
authelia
metrics
anubis
string
controllers.authelia.containers.anubis.resources.limits.memory (1)
256Mi
string
controllers.authelia.containers.anubis.resources.requests.cpu (1)
26m
string
controllers.authelia.containers.anubis.resources.requests.memory (1)
256Mi
string
controllers.authelia.containers.anubis.securityContext.allowPrivilegeEscalation (1)
false
boolean
controllers.authelia.containers.anubis.securityContext.capabilities.drop[] (1)
- ALL
string
controllers.authelia.containers.anubis.securityContext.readOnlyRootFilesystem (1)
true
boolean
controllers.authelia.replicas (12)
2
number
controllers.authelia.strategy (11)
RollingUpdate
string
controllers.authelia.initContainers.init-db.envFrom[].secretRef.name (5)
authelia-secret
string
controllers.authelia.initContainers.init-db.image.repository (5)
ghcr.io/home-operations/postgres-init
string
controllers.authelia.initContainers.init-db.image.tag (5)
18.6.0@sha256:87627baaddb0cabed4ebe033e75038e5c7b6b081c18e86514c99067179a90719
number, string
controllers.authelia.initContainers.init-db.image.pullPolicy (1)
IfNotPresent
string
controllers.authelia.initContainers.01-init-db.envFrom[].secretRef.name (1)
authelia-initdb-secret
string
controllers.authelia.initContainers.01-init-db.image.repository (1)
ghcr.io/home-operations/postgres-init
string
controllers.authelia.initContainers.01-init-db.image.tag (1)
18
string
controllers.authelia.pod.securityContext.runAsGroup (4)
568
number
controllers.authelia.pod.securityContext.runAsNonRoot (4)
true
boolean
controllers.authelia.pod.securityContext.runAsUser (4)
568
number
controllers.authelia.pod.securityContext.fsGroup (1)
10000
number
controllers.authelia.pod.securityContext.fsGroupChangePolicy (1)
OnRootMismatch
string
controllers.authelia.pod.securityContext.seccompProfile.type (1)
RuntimeDefault
string
controllers.authelia.pod.topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/name" (2)
authelia
string
controllers.authelia.pod.topologySpreadConstraints[].maxSkew (2)
1
number
controllers.authelia.pod.topologySpreadConstraints[].topologyKey (2)
kubernetes.io/hostname
string
controllers.authelia.pod.topologySpreadConstraints[].whenUnsatisfiable (2)
DoNotSchedule
string
controllers.authelia.pod.affinity.nodeAffinity.preferredDuringSchedulingIgnoredDuringExecution[].preference.matchExpressions[].key (1)
node-type
string
controllers.authelia.pod.affinity.nodeAffinity.preferredDuringSchedulingIgnoredDuringExecution[].preference.matchExpressions[].operator (1)
In
string
controllers.authelia.pod.affinity.nodeAffinity.preferredDuringSchedulingIgnoredDuringExecution[].preference.matchExpressions[].values[] (1)
- lightweight
string
controllers.authelia.pod.affinity.nodeAffinity.preferredDuringSchedulingIgnoredDuringExecution[].weight (1)
100
number
controllers.authelia.pod.enableServiceLinks (1)
false
boolean
controllers.authelia.labels.postgres (2)
true
string
controllers.authelia.podDisruptionBudget.minAvailable (2)
1
number
controllers.authelia.type (2)
deployment
string
controllers.main.annotations."reloader.stakater.com/auto" (1)
true
string
controllers.main.containers.main.env.AUTHELIA_SERVER_ADDRESS (1)
tcp://0.0.0.0:9191
string
controllers.main.containers.main.env.AUTHELIA_TELEMETRY_METRICS_ADDRESS (1)
tcp://0.0.0.0:9959
string
controllers.main.containers.main.env.X_AUTHELIA_CONFIG (1)
/config/configuration.yaml
string
controllers.main.containers.main.env.X_AUTHELIA_CONFIG_FILTERS (1)
template
string
controllers.main.containers.main.image.repository (1)
ghcr.io/authelia/authelia
string
controllers.main.containers.main.image.tag (1)
4.39.28@sha256:bd97cff4fcbf715b5ff1f9ae286afbe6033afce385302520b0368122d43a6f54
string
controllers.main.containers.main.probes.liveness.custom (1)
true
boolean
controllers.main.containers.main.probes.liveness.enabled (1)
true
boolean
controllers.main.containers.main.probes.liveness.spec.failureThreshold (1)
3
number
controllers.main.containers.main.probes.liveness.spec.httpGet.path (1)
/api/health
string
controllers.main.containers.main.probes.liveness.spec.httpGet.port (1)
9191
number
controllers.main.containers.main.probes.liveness.spec.initialDelaySeconds (1)
0
number
controllers.main.containers.main.probes.liveness.spec.periodSeconds (1)
10
number
controllers.main.containers.main.probes.liveness.spec.timeoutSeconds (1)
1
number
controllers.main.containers.main.probes.readiness.custom (1)
true
boolean
controllers.main.containers.main.probes.readiness.enabled (1)
true
boolean
controllers.main.containers.main.probes.readiness.spec.failureThreshold (1)
3
number
controllers.main.containers.main.probes.readiness.spec.httpGet.path (1)
/api/health
string
controllers.main.containers.main.probes.readiness.spec.httpGet.port (1)
9191
number
controllers.main.containers.main.probes.readiness.spec.initialDelaySeconds (1)
0
number
controllers.main.containers.main.probes.readiness.spec.periodSeconds (1)
10
number
controllers.main.containers.main.probes.readiness.spec.timeoutSeconds (1)
1
number
controllers.main.containers.main.probes.startup.enabled (1)
false
boolean
controllers.main.containers.main.resources.limits.memory (1)
200Mi
string
controllers.main.containers.main.resources.requests.cpu (1)
5m
string
controllers.main.containers.main.resources.requests.memory (1)
10Mi
string
controllers.main.pod.enableServiceLinks (1)
false
boolean
controllers.main.pod.securityContext.fsGroup (1)
568
number
controllers.main.pod.securityContext.fsGroupChangePolicy (1)
OnRootMismatch
string
controllers.main.pod.securityContext.runAsGroup (1)
568
number
controllers.main.pod.securityContext.runAsUser (1)
568
number
controllers.main.pod.topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/name" (1)
authelia
string
controllers.main.pod.topologySpreadConstraints[].maxSkew (1)
1
number
controllers.main.pod.topologySpreadConstraints[].topologyKey (1)
kubernetes.io/hostname
string
controllers.main.pod.topologySpreadConstraints[].whenUnsatisfiable (1)
DoNotSchedule
string
controllers.main.replicas (1)
2
number
controllers.main.strategy (1)
RollingUpdate
string
service.app.ports.http.port (12)
80
number
service.app.ports.http.primary (1)
true
boolean
service.app.ports.metrics.port (11)
8080
number
service.app.ports.metrics.enabled (2)
true
boolean
service.app.controller (10)
authelia
string
service.authelia.ports.http.port (2)
80
number
service.authelia.ports.http.primary (1)
true
boolean
service.authelia.ports.http.protocol (1)
HTTP
string
service.authelia.ports.metrics.port (2)
8080
number
service.authelia.ports.metrics.protocol (1)
HTTP
string
service.authelia.ports.anubis.port (1)
8923
number
service.authelia.controller (1)
authelia
string
service.main.controller (1)
main
string
service.main.ports.http.port (1)
9191
number
service.main.ports.metrics.enabled (1)
true
boolean
service.main.ports.metrics.port (1)
9959
number
route.app.hostnames[] (10)
- auth.${SECRET_DOMAIN}
string
route.app.parentRefs[].name (10)
envoy-external
string
route.app.parentRefs[].namespace (10)
network
string
route.app.parentRefs[].sectionName (5)
https
string
route.app.rules[].backendRefs[].port (7)
80
string, number
route.app.rules[].backendRefs[].identifier (5)
app
string
route.app.rules[].backendRefs[].name (2)
authelia
string
route.app.rules[].filters[].type (2)
ResponseHeaderModifier
string
route.app.rules[].filters[].requestHeaderModifier.set[].name (1)
Cache-Control
Pragma
X-Frame-Options
X-XSS-Protection
string
route.app.rules[].filters[].requestHeaderModifier.set[].value (1)
no-store
no-cache
SAMEORIGIN
1; mode=block
string
route.app.rules[].filters[].responseHeaderModifier.set[].name (1)
X-Frame-Options
X-XSS-Protection
Cache-Control
Pragma
string
route.app.rules[].filters[].responseHeaderModifier.set[].value (1)
SAMEORIGIN
1; mode=block
no-store
no-cache
string
route.app.annotations.glance/icon (2)
https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons/png/authelia.png
string
route.app.annotations.glance/id (2)
Security
string
route.app.annotations.glance/name (2)
Authelia
string
route.app.annotations.glance/show (2)
true
string
route.app.annotations."gatus.home-operations.com/enabled" (1)
true
string
route.app.annotations."gethomepage.dev/app" (1)
authelia
string
route.app.annotations."gethomepage.dev/description" (1)

string
route.app.annotations."gethomepage.dev/enabled" (1)
true
string
route.app.annotations."gethomepage.dev/group" (1)
external
string
route.app.annotations."gethomepage.dev/icon" (1)
authelia.svg
string
route.app.annotations."gethomepage.dev/name" (1)
Authelia
string
route.authelia.hostnames[] (2)
- auth.${CLUSTER_DOMAIN}
string
route.authelia.parentRefs[].name (2)
envoy-external
envoy-internal
string
route.authelia.parentRefs[].namespace (2)
network
network
string
route.authelia.parentRefs[].sectionName (1)
websecure
string
route.authelia.annotations."gethomepage.dev/description" (1)
Open-source authentication and authorization server
string
route.authelia.annotations."gethomepage.dev/enabled" (1)
true
string
route.authelia.annotations."gethomepage.dev/group" (1)
Auth
string
route.authelia.annotations."gethomepage.dev/icon" (1)
authelia
string
route.authelia.annotations."gethomepage.dev/name" (1)
Authelia
string
route.authelia.rules[].backendRefs[].identifier (1)
authelia
string
route.authelia.rules[].backendRefs[].port (1)
anubis
string
route.main.hostnames[] (2)
- auth.${SECRET_DOMAIN}
string
route.main.parentRefs[].name (2)
envoy-external
string
route.main.parentRefs[].namespace (2)
networking
string
route.main.parentRefs[].sectionName (1)
https
string
route.main.annotations."gatus.home-operations.com/endpoint" (1)
group: infrastructure
string
route.main.annotations."gethomepage.dev/enabled" (1)
true
string
route.main.annotations."gethomepage.dev/group" (1)
Infra
string
route.main.annotations."gethomepage.dev/icon" (1)
authelia.svg
string
route.main.rules[].backendRefs[].identifier (1)
main
string
route.main.rules[].backendRefs[].port (1)
http
string
route.main.rules[].matches[].path.type (1)
PathPrefix
string
route.main.rules[].matches[].path.value (1)
/
string
route.internal.annotations."gatus.home-operations.com/enabled" (1)
true
string
route.internal.hostnames[] (1)
- auth.petrovic.network
string
route.internal.parentRefs[].name (1)
envoy-internal
string
route.internal.parentRefs[].namespace (1)
network
string
serviceMonitor.app.endpoints[].port (10)
metrics
string
serviceMonitor.app.endpoints[].interval (7)
1m
string
serviceMonitor.app.endpoints[].path (7)
/metrics
string
serviceMonitor.app.endpoints[].scheme (7)
http
string
serviceMonitor.app.endpoints[].scrapeTimeout (7)
10s
string
serviceMonitor.app.serviceName (9)
authelia
string
serviceMonitor.app.enabled (3)
true
boolean
serviceMonitor.authelia.endpoints[].path (1)
/metrics
string
serviceMonitor.authelia.endpoints[].port (1)
metrics
string
serviceMonitor.authelia.serviceName (1)
authelia
string
serviceMonitor.main.enabled (1)
true
boolean
serviceMonitor.main.endpoints[].interval (1)
1m
string
serviceMonitor.main.endpoints[].path (1)
/metrics
string
serviceMonitor.main.endpoints[].port (1)
metrics
string
serviceMonitor.main.endpoints[].scheme (1)
http
string
serviceMonitor.main.endpoints[].scrapeTimeout (1)
10s
string
serviceMonitor.main.serviceName (1)
authelia
string
defaultPodOptions.securityContext.runAsGroup (9)
65534
number
defaultPodOptions.securityContext.runAsUser (9)
1000
number
defaultPodOptions.securityContext.runAsNonRoot (8)
true
boolean
defaultPodOptions.securityContext.fsGroupChangePolicy (6)
OnRootMismatch
string
defaultPodOptions.securityContext.fsGroup (5)
1000
number
defaultPodOptions.securityContext.seccompProfile.type (2)
RuntimeDefault
string
defaultPodOptions.enableServiceLinks (6)
false
boolean
defaultPodOptions.topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/name" (5)
authelia
string
defaultPodOptions.topologySpreadConstraints[].maxSkew (5)
1
number
defaultPodOptions.topologySpreadConstraints[].topologyKey (5)
kubernetes.io/hostname
string
defaultPodOptions.topologySpreadConstraints[].whenUnsatisfiable (5)
DoNotSchedule
string
defaultPodOptions.automountServiceAccountToken (2)
false
boolean
defaultPodOptions.hostIPC (1)
false
boolean
defaultPodOptions.hostNetwork (1)
false
boolean
defaultPodOptions.hostPID (1)
false
boolean
defaultPodOptions.labels."policy.petrovic.network/public-app" (1)
true
string
defaultPodOptions.shareProcessNamespace (1)
false
boolean
enableServiceLinks (1)
false
boolean
ingress.app.annotations."external-dns.alpha.kubernetes.io/target" (1)
external.${SECRET_DOMAIN}
string
ingress.app.annotations."nginx.ingress.kubernetes.io/configuration-snippet" (1)
add_header Cache-Control "no-store"; add_header Pragma "no-cache"; add_header X-Frame-Options "SAMEORIGIN"; add_header X-XSS-Protection "1; mode=block";
string
ingress.app.className (1)
external
string
ingress.app.hosts[].host (1)
auth.${SECRET_DOMAIN}
string
ingress.app.hosts[].paths[].path (1)
/
string
ingress.app.hosts[].paths[].service.identifier (1)
app
string
ingress.app.hosts[].paths[].service.port (1)
http
string