authentik helm

No introduction found. Create it?

More popular helm chart found

authentik from goauthentik is more popular with 42 repositories.

Install

Install with:

helm repo add authentik oci://ghcr.io/bjw-s-labs/charts/
helm install authentik authentik/authentik -f values.yaml

Examples

See examples from other people.

Top Repositories (5 out of 29)

NameRepoStarsVersionTimestamp
authentikrafaribe/home-ops962025.10.36 hours ago
authentiknicolerenee/infra1022026.2.22 days ago
authentikjoryirving/home-ops2072026.2.24 days ago
authentikdrag0n141/home-ops532026.2.220 days ago
authentikToaHartor/maisonneux432026.2.1a month ago

Values

See the most popular values for this chart:

KeyTypes
worker.resources.limits.memory (24)
1Gi
string
worker.resources.limits.cpu (1)
string
worker.resources.requests.cpu (23)
50m
string
worker.resources.requests.memory (14)
512Mi
string
worker.replicas (13)
1
number
worker.autoscaling.enabled (11)
true
boolean
worker.autoscaling.minReplicas (11)
1
number
worker.autoscaling.maxReplicas (5)
5
number
worker.autoscaling.targetCPUUtilizationPercentage (5)
60
number
worker.autoscaling.behavior.scaleDown.stabilizationWindowSeconds (4)
300
number
worker.autoscaling.behavior.scaleUp.stabilizationWindowSeconds (4)
300
number
worker.autoscaling.targetMemoryUtilizationPercentage (1)
number
worker.volumeMounts[].mountPath (7)
/postgres-creds
string
worker.volumeMounts[].name (7)
postgres-creds
string
worker.volumeMounts[].readOnly (6)
true
boolean
worker.volumes[].name (7)
postgres-creds
string
worker.volumes[].secret.secretName (5)
string
worker.volumes[].configMap.name (1)
string
worker.volumes[].csi.driver (1)
string
worker.volumes[].csi.readOnly (1)
boolean
worker.volumes[].csi.volumeAttributes."csi.cert-manager.io/common-name" (1)
string
worker.volumes[].csi.volumeAttributes."csi.cert-manager.io/dns-names" (1)
string
worker.volumes[].csi.volumeAttributes."csi.cert-manager.io/issuer-kind" (1)
string
worker.volumes[].csi.volumeAttributes."csi.cert-manager.io/issuer-name" (1)
string
worker.volumes[].csi.volumeAttributes."csi.cert-manager.io/key-algorithm" (1)
string
worker.volumes[].csi.volumeAttributes."csi.cert-manager.io/key-encoding" (1)
string
worker.volumes[].csi.volumeAttributes."csi.cert-manager.io/key-size" (1)
string
worker.volumes[].csi.volumeAttributes."csi.cert-manager.io/key-usages" (1)
string
worker.volumes[].persistentVolumeClaim.claimName (1)
string
worker.pdb.enabled (4)
true
boolean
worker.pdb.minAvailable (4)
1
number
worker.pdb.maxUnavailable (1)
number
worker.metrics.enabled (3)
true
boolean
worker.metrics.serviceMonitor.enabled (3)
true
boolean
worker.metrics.prometheus.serviceMonitor.enabled (1)
boolean
worker.env[].name (2)
string
worker.env[].value (2)
string
worker.env[].valueFrom.secretKeyRef.key (1)
string
worker.env[].valueFrom.secretKeyRef.name (1)
string
worker.envFrom[].secretRef.name (2)
string
worker.extraContainers[].env[].name (2)
string
worker.extraContainers[].env[].value (2)
string
worker.extraContainers[].image (2)
string
worker.extraContainers[].name (2)
string
worker.extraContainers[].volumeMounts[].mountPath (2)
string
worker.extraContainers[].volumeMounts[].name (2)
string
worker.initContainers[].command[] (2)
string
worker.initContainers[].image (2)
string
worker.initContainers[].name (2)
string
worker.initContainers[].volumeMounts[].mountPath (2)
string
worker.initContainers[].volumeMounts[].name (2)
string
worker.initContainers[].volumeMounts[].readOnly (2)
boolean
worker.affinity.podAntiAffinity.preferredDuringSchedulingIgnoredDuringExecution[].podAffinityTerm.labelSelector.matchLabels."app.kubernetes.io/component" (1)
string
worker.affinity.podAntiAffinity.preferredDuringSchedulingIgnoredDuringExecution[].podAffinityTerm.topologyKey (1)
string
worker.affinity.podAntiAffinity.preferredDuringSchedulingIgnoredDuringExecution[].weight (1)
number
worker.affinity.podAntiAffinity.requiredDuringSchedulingIgnoredDuringExecution[].labelSelector.matchLabels."app.kubernetes.io/component" (1)
string
worker.affinity.podAntiAffinity.requiredDuringSchedulingIgnoredDuringExecution[].topologyKey (1)
string
worker.containerSecurityContext.allowPrivilegeEscalation (1)
boolean
worker.containerSecurityContext.capabilities.drop[] (1)
string
worker.containerSecurityContext.readOnlyRootFilesystem (1)
boolean
worker.containerSecurityContext.runAsNonRoot (1)
boolean
worker.containerSecurityContext.seccomProfile.type (1)
string
worker.dnsConfig.options[].name (1)
string
worker.dnsConfig.options[].value (1)
string
worker.podAnnotations."reloader.stakater.com/auto" (1)
string
worker.serviceAccount.create (1)
boolean
worker.serviceAccountName (1)
string
worker.topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/component" (1)
string
worker.topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/instance" (1)
string
worker.topologySpreadConstraints[].maxSkew (1)
number
worker.topologySpreadConstraints[].topologyKey (1)
string
worker.topologySpreadConstraints[].whenUnsatisfiable (1)
string
global.envFrom[].secretRef.name (22)
authentik-secret
string
global.deploymentStrategy.type (16)
RollingUpdate
string
global.deploymentStrategy.rollingUpdate.maxSurge (2)
number
global.deploymentStrategy.rollingUpdate.maxUnavailable (2)
number
global.env[].name (11)
string
global.env[].value (10)
string
global.env[].valueFrom.secretKeyRef.key (5)
string
global.env[].valueFrom.secretKeyRef.name (5)
string
global.volumeMounts[].mountPath (9)
/media
string
global.volumeMounts[].name (9)
media
string
global.volumeMounts[].readOnly (3)
true
boolean
global.volumeMounts[].subPath (2)
string
global.volumes[].name (9)
media
string
global.volumes[].persistentVolumeClaim.claimName (3)
string
global.volumes[].secret.secretName (3)
string
global.volumes[].secret.items[].key (2)
string
global.volumes[].secret.items[].path (2)
string
global.volumes[].secret.defaultMode (1)
number
global.volumes[].configMap.name (2)
string
global.podAnnotations."secret.reloader.stakater.com/reload" (8)
authentik-secret
string
global.podAnnotations."reloader.stakater.com/auto" (5)
true
string
global.podAnnotations."k8s.ksgate.org/database-applied" (1)
string
global.podAnnotations."k8s.ksgate.org/postgres-ready" (1)
string
global.podAnnotations."k8s.ksgate.org/postgres-service" (1)
string
global.deploymentAnnotations."secret.reloader.stakater.com/reload" (6)
authentik-secret
string
global.deploymentAnnotations."reloader.stakater.com/auto" (4)
true
string
global.deploymentAnnotations."configmap.reloader.stakater.com/reload" (1)
string
global.image.repository (3)
ghcr.io/goauthentik/server
string
global.image.tag (3)
2026.2.2
string
global.image.pullPolicy (1)
string
global.securityContext.fsGroup (3)
1000
number
global.securityContext.runAsGroup (2)
number
global.securityContext.runAsUser (2)
number
global.securityContext.fsGroupChangePolicy (1)
string
global.additionalLabels.postgres (2)
string
global.fullnameOverride (2)
string
global.addPrometheusAnnotations (1)
boolean
global.podLabels."egress.samoth.eu/database" (1)
string
global.podLabels."egress.samoth.eu/kube-apiserver" (1)
string
global.podLabels."ingress.samoth.eu/envoy-internal" (1)
string
global.podLabels."ingress.samoth.eu/kube-apiserver" (1)
string
global.priorityClassName (1)
string
global.securityClassName (1)
string
global.storageClass (1)
string
global.topologySpreadConstraints[].maxSkew (1)
number
global.topologySpreadConstraints[].topologyKey (1)
string
global.topologySpreadConstraints[].whenUnsatisfiable (1)
string
server.resources.limits.memory (22)
1Gi
string
server.resources.limits.cpu (2)
string
server.resources.requests.cpu (22)
50m
string
server.resources.requests.memory (14)
512Mi
string
server.route.main.enabled (21)
true
boolean
server.route.main.hostnames[] (21)
- auth.${SECRET_DOMAIN}
string
server.route.main.parentRefs[].name (21)
envoy-external
string
server.route.main.parentRefs[].namespace (21)
network
string
server.route.main.parentRefs[].sectionName (8)
https
string
server.route.main.parentRefs[].group (2)
string
server.route.main.parentRefs[].kind (2)
string
server.route.main.annotations."gethomepage.dev/enabled" (3)
true
string
server.route.main.annotations."gethomepage.dev/group" (3)
Infrastructure
string
server.route.main.annotations."gethomepage.dev/icon" (3)
string
server.route.main.annotations."gethomepage.dev/name" (3)
Authentik
string
server.route.main.annotations."gatus.home-operations.com/endpoint" (2)
string
server.route.main.annotations."gethomepage.dev/pod-selector" (2)
string
server.route.main.annotations."gethomepage.dev/widget.key" (2)
string
server.route.main.annotations."gethomepage.dev/widget.type" (2)
string
server.route.main.annotations."gethomepage.dev/widget.url" (2)
string
server.route.main.annotations."gethomepage.dev/widget.version" (2)
string
server.route.main.annotations."external-dns.alpha.kubernetes.io/target" (1)
string
server.route.main.annotations."gatus.home-operations.com/enabled" (1)
string
server.route.main.annotations."gethomepage.dev/app" (1)
string
server.route.main.annotations."gethomepage.dev/description" (1)
string
server.route.main.annotations."gethomepage.dev/href" (1)
string
server.route.main.annotations."gethomepage.dev/namespace" (1)
string
server.route.main.rules[].backendRefs[].name (1)
string
server.route.main.rules[].backendRefs[].port (1)
number
server.metrics.serviceMonitor.enabled (20)
true
boolean
server.metrics.enabled (18)
true
boolean
server.metrics.prometheus.serviceMonitor.enabled (7)
true
boolean
server.initContainers[].image (14)
ghcr.io/home-operations/postgres-init:18
string
server.initContainers[].name (14)
init-db
string
server.initContainers[].envFrom[].secretRef.name (12)
authentik-secret
string
server.initContainers[].command[] (2)
string
server.initContainers[].volumeMounts[].mountPath (2)
string
server.initContainers[].volumeMounts[].name (2)
string
server.initContainers[].volumeMounts[].readOnly (2)
boolean
server.replicas (11)
1
number
server.autoscaling.enabled (10)
true
boolean
server.autoscaling.minReplicas (10)
1
number
server.autoscaling.maxReplicas (5)
5
number
server.autoscaling.targetCPUUtilizationPercentage (5)
60
number
server.autoscaling.behavior.scaleDown.stabilizationWindowSeconds (4)
300
number
server.autoscaling.behavior.scaleUp.stabilizationWindowSeconds (4)
300
number
server.autoscaling.targetMemoryUtilizationPercentage (1)
number
server.volumeMounts[].mountPath (7)
string
server.volumeMounts[].name (7)
string
server.volumeMounts[].readOnly (6)
true
boolean
server.volumeMounts[].subPath (1)
string
server.volumes[].name (7)
string
server.volumes[].secret.secretName (5)
string
server.volumes[].configMap.name (2)
string
server.volumes[].persistentVolumeClaim.claimName (2)
string
server.volumes[].csi.driver (1)
string
server.volumes[].csi.readOnly (1)
boolean
server.volumes[].csi.volumeAttributes."csi.cert-manager.io/common-name" (1)
string
server.volumes[].csi.volumeAttributes."csi.cert-manager.io/dns-names" (1)
string
server.volumes[].csi.volumeAttributes."csi.cert-manager.io/issuer-kind" (1)
string
server.volumes[].csi.volumeAttributes."csi.cert-manager.io/issuer-name" (1)
string
server.volumes[].csi.volumeAttributes."csi.cert-manager.io/key-algorithm" (1)
string
server.volumes[].csi.volumeAttributes."csi.cert-manager.io/key-encoding" (1)
string
server.volumes[].csi.volumeAttributes."csi.cert-manager.io/key-size" (1)
string
server.volumes[].csi.volumeAttributes."csi.cert-manager.io/key-usages" (1)
string
server.pdb.enabled (5)
true
boolean
server.pdb.minAvailable (4)
1
number
server.pdb.maxUnavailable (2)
number
server.containerSecurityContext.allowPrivilegeEscalation (2)
boolean
server.containerSecurityContext.capabilities.drop[] (2)
string
server.containerSecurityContext.runAsNonRoot (2)
boolean
server.containerSecurityContext.readOnlyRootFilesystem (1)
boolean
server.containerSecurityContext.seccomProfile.type (1)
string
server.env[].name (2)
string
server.env[].value (2)
string
server.env[].valueFrom.secretKeyRef.key (1)
string
server.env[].valueFrom.secretKeyRef.name (1)
string
server.envFrom[].secretRef.name (2)
string
server.ingress.enabled (2)
boolean
server.ingress.ingressClassName (1)
string
server.annotations."reloader.stakater.com/auto" (1)
string
server.containerPorts.ldaps (1)
number
server.deploymentAnnotations."secret.reloader.stakater.com/reload" (1)
string
server.podAnnotations."reloader.stakater.com/auto" (1)
string
server.podLabels."ingress.samoth.eu/vmagent" (1)
string
server.securityContext.fsGroup (1)
number
server.securityContext.runAsGroup (1)
number
server.securityContext.runAsUser (1)
number
server.serviceAccountName (1)
string
server.topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/component" (1)
string
server.topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/instance" (1)
string
server.topologySpreadConstraints[].maxSkew (1)
number
server.topologySpreadConstraints[].topologyKey (1)
string
server.topologySpreadConstraints[].whenUnsatisfiable (1)
string
prometheus.rules.enabled (17)
true
boolean
authentik.email.port (10)
587
number
authentik.email.use_tls (9)
true
boolean
authentik.email.from (6)
string
authentik.email.host (5)
string
authentik.email.use_ssl (2)
boolean
authentik.email.timeout (1)
number
authentik.redis.host (10)
authentik-dragonfly
string
authentik.redis.db (1)
number
authentik.error_reporting.enabled (9)
false
boolean
authentik.error_reporting.send_pii (5)
false
boolean
authentik.error_reporting.enable (1)
boolean
authentik.error_reporting.environment (1)
string
authentik.log_level (9)
info
string
authentik.postgresql.host (8)
string
authentik.postgresql.user (7)
file:///postgres-creds/username
string
authentik.postgresql.password (6)
file:///postgres-creds/password
string
authentik.postgresql.name (4)
string
authentik.postgresql.port (3)
5432
number
authentik.postgresql.enabled (1)
boolean
authentik.avatars (2)
string
authentik.disable_startup_analytics (2)
boolean
authentik.disable_update_check (2)
boolean
authentik.outposts.container_image_base (2)
string
authentik.enabled (1)
boolean
authentik.events.context_processors.asn (1)
string
authentik.events.context_processors.geoip (1)
string
authentik.security_key (1)
string
authentik.session_storage (1)
string
authentik.worker.concurrency (1)
number
redis.enabled (10)
false
boolean
postgresql.enabled (8)
false
boolean
geoip.enabled (3)
boolean
geoip.existingSecret.accountId (3)
string
geoip.existingSecret.licenseKey (3)
string
geoip.existingSecret.secretName (3)
authentik-secret
string
geoip.editionIds (2)
string
geoip.resources.limits.memory (2)
string
geoip.resources.requests.cpu (2)
string
geoip.resources.requests.memory (1)
string
geoip.updateInterval (2)
number
geoip.image.repository (1)
string
geoip.image.tag (1)
string
additionalObjects[].apiVersion (1)
string
additionalObjects[].kind (1)
string
additionalObjects[].metadata.annotations."external-dns.alpha.kubernetes.io/hostname" (1)
string
additionalObjects[].metadata.name (1)
string
additionalObjects[].spec.parentRefs[].name (1)
string
additionalObjects[].spec.parentRefs[].namespace (1)
string
additionalObjects[].spec.parentRefs[].sectionName (1)
string
additionalObjects[].spec.rules[].backendRefs[].name (1)
string
additionalObjects[].spec.rules[].backendRefs[].port (1)
number
blueprints.configMaps[] (1)
string
controllers.ldap.annotations."reloader.stakater.com/auto" (1)
string
controllers.ldap.containers.app.env.AUTHENTIK_HOST (1)
string
controllers.ldap.containers.app.env.AUTHENTIK_TOKEN.valueFrom.secretKeyRef.key (1)
string
controllers.ldap.containers.app.env.AUTHENTIK_TOKEN.valueFrom.secretKeyRef.name (1)
string
controllers.ldap.containers.app.image.repository (1)
string
controllers.ldap.containers.app.image.tag (1)
string
controllers.ldap.containers.app.probes.liveness.custom (1)
boolean
controllers.ldap.containers.app.probes.liveness.enabled (1)
boolean
controllers.ldap.containers.app.probes.liveness.spec.exec.command[] (1)
string
controllers.ldap.containers.app.probes.readiness.custom (1)
boolean
controllers.ldap.containers.app.probes.readiness.enabled (1)
boolean
controllers.ldap.containers.app.probes.readiness.spec.exec.command[] (1)
string
controllers.ldap.containers.app.probes.startup.custom (1)
boolean
controllers.ldap.containers.app.probes.startup.enabled (1)
boolean
controllers.ldap.containers.app.probes.startup.spec.exec.command[] (1)
string
controllers.ldap.containers.app.probes.startup.spec.failureThreshold (1)
number
controllers.ldap.containers.app.probes.startup.spec.initialDelaySeconds (1)
number
controllers.ldap.containers.app.probes.startup.spec.periodSeconds (1)
number
controllers.ldap.containers.app.resources.limits.memory (1)
string
controllers.ldap.containers.app.resources.requests.cpu (1)
string
controllers.ldap.containers.app.securityContext.allowPrivilegeEscalation (1)
boolean
controllers.ldap.containers.app.securityContext.capabilities.drop[] (1)
string
controllers.ldap.containers.app.securityContext.readOnlyRootFilesystem (1)
boolean
controllers.server.annotations."reloader.stakater.com/auto" (1)
string
controllers.server.containers.app.args[] (1)
string
controllers.server.containers.app.env.AUTHENTIK_DISABLE_UPDATE_CHECK (1)
string
controllers.server.containers.app.env.AUTHENTIK_ERROR_REPORTING__ENABLED (1)
string
controllers.server.containers.app.env.AUTHENTIK_ERROR_REPORTING__SEND_PII (1)
string
controllers.server.containers.app.env.AUTHENTIK_LISTEN__TRUSTED_PROXY_CIDRS (1)
string
controllers.server.containers.app.env.AUTHENTIK_OUTPOSTS__DISCOVER (1)
string
controllers.server.containers.app.env.AUTHENTIK_POSTGRESQL__CONN_HEALTH_CHECKS (1)
string
controllers.server.containers.app.env.AUTHENTIK_POSTGRESQL__CONN_MAX_AGE (1)
string
controllers.server.containers.app.env.AUTHENTIK_POSTGRESQL__DISABLE_SERVER_SIDE_CURSORS (1)
string
controllers.server.containers.app.env.AUTHENTIK_POSTGRESQL__HOST (1)
string
controllers.server.containers.app.env.AUTHENTIK_POSTGRESQL__NAME (1)
string
controllers.server.containers.app.env.AUTHENTIK_POSTGRESQL__SSLCERT (1)
string
controllers.server.containers.app.env.AUTHENTIK_POSTGRESQL__SSLKEY (1)
string
controllers.server.containers.app.env.AUTHENTIK_POSTGRESQL__SSLMODE (1)
string
controllers.server.containers.app.env.AUTHENTIK_POSTGRESQL__SSLROOTCERT (1)
string
controllers.server.containers.app.env.AUTHENTIK_POSTGRESQL__USER (1)
string
controllers.server.containers.app.env.AUTHENTIK_STORAGE__MEDIA__BACKEND (1)
string
controllers.server.containers.app.env.AUTHENTIK_STORAGE__MEDIA__S3__ADDRESSING_STYLE (1)
string
controllers.server.containers.app.env.AUTHENTIK_STORAGE__MEDIA__S3__BUCKET_NAME (1)
string
controllers.server.containers.app.env.AUTHENTIK_STORAGE__MEDIA__S3__SECURE_URLS (1)
string
controllers.server.containers.app.env.AUTHENTIK_STORAGE__MEDIA__S3__USE_SSL (1)
string
controllers.server.containers.app.env.TZ (1)
string
controllers.server.containers.app.envFrom[].secretRef.name (1)
string
controllers.server.containers.app.image.repository (1)
string
controllers.server.containers.app.image.tag (1)
string
controllers.server.containers.app.probes.liveness.custom (1)
boolean
controllers.server.containers.app.probes.liveness.enabled (1)
boolean
controllers.server.containers.app.probes.liveness.spec.failureThreshold (1)
number
controllers.server.containers.app.probes.liveness.spec.httpGet.path (1)
string
controllers.server.containers.app.probes.liveness.spec.httpGet.port (1)
number
controllers.server.containers.app.probes.liveness.spec.initialDelaySeconds (1)
number
controllers.server.containers.app.probes.liveness.spec.periodSeconds (1)
number
controllers.server.containers.app.probes.liveness.spec.timeoutSeconds (1)
number
controllers.server.containers.app.probes.readiness.custom (1)
boolean
controllers.server.containers.app.probes.readiness.enabled (1)
boolean
controllers.server.containers.app.probes.readiness.spec.failureThreshold (1)
number
controllers.server.containers.app.probes.readiness.spec.httpGet.path (1)
string
controllers.server.containers.app.probes.readiness.spec.httpGet.port (1)
number
controllers.server.containers.app.probes.readiness.spec.initialDelaySeconds (1)
number
controllers.server.containers.app.probes.readiness.spec.periodSeconds (1)
number
controllers.server.containers.app.probes.readiness.spec.timeoutSeconds (1)
number
controllers.server.containers.app.probes.startup.custom (1)
boolean
controllers.server.containers.app.probes.startup.enabled (1)
boolean
controllers.server.containers.app.probes.startup.spec.failureThreshold (1)
number
controllers.server.containers.app.probes.startup.spec.httpGet.path (1)
string
controllers.server.containers.app.probes.startup.spec.httpGet.port (1)
number
controllers.server.containers.app.probes.startup.spec.initialDelaySeconds (1)
number
controllers.server.containers.app.probes.startup.spec.periodSeconds (1)
number
controllers.server.containers.app.resources.limits.memory (1)
string
controllers.server.containers.app.resources.requests.cpu (1)
string
controllers.server.containers.app.resources.requests.memory (1)
string
controllers.server.containers.app.securityContext.allowPrivilegeEscalation (1)
boolean
controllers.server.containers.app.securityContext.capabilities.drop[] (1)
string
controllers.server.containers.app.securityContext.readOnlyRootFilesystem (1)
boolean
controllers.worker.annotations."reloader.stakater.com/auto" (1)
string
controllers.worker.containers.app.args[] (1)
string
controllers.worker.containers.app.env.AUTHENTIK_DISABLE_UPDATE_CHECK (1)
string
controllers.worker.containers.app.env.AUTHENTIK_ERROR_REPORTING__ENABLED (1)
string
controllers.worker.containers.app.env.AUTHENTIK_ERROR_REPORTING__SEND_PII (1)
string
controllers.worker.containers.app.env.AUTHENTIK_LISTEN__TRUSTED_PROXY_CIDRS (1)
string
controllers.worker.containers.app.env.AUTHENTIK_OUTPOSTS__DISCOVER (1)
string
controllers.worker.containers.app.env.AUTHENTIK_POSTGRESQL__CONN_HEALTH_CHECKS (1)
string
controllers.worker.containers.app.env.AUTHENTIK_POSTGRESQL__CONN_MAX_AGE (1)
string
controllers.worker.containers.app.env.AUTHENTIK_POSTGRESQL__DISABLE_SERVER_SIDE_CURSORS (1)
string
controllers.worker.containers.app.env.AUTHENTIK_POSTGRESQL__HOST (1)
string
controllers.worker.containers.app.env.AUTHENTIK_POSTGRESQL__NAME (1)
string
controllers.worker.containers.app.env.AUTHENTIK_POSTGRESQL__SSLCERT (1)
string
controllers.worker.containers.app.env.AUTHENTIK_POSTGRESQL__SSLKEY (1)
string
controllers.worker.containers.app.env.AUTHENTIK_POSTGRESQL__SSLMODE (1)
string
controllers.worker.containers.app.env.AUTHENTIK_POSTGRESQL__SSLROOTCERT (1)
string
controllers.worker.containers.app.env.AUTHENTIK_POSTGRESQL__USER (1)
string
controllers.worker.containers.app.env.AUTHENTIK_STORAGE__MEDIA__BACKEND (1)
string
controllers.worker.containers.app.env.AUTHENTIK_STORAGE__MEDIA__S3__ADDRESSING_STYLE (1)
string
controllers.worker.containers.app.env.AUTHENTIK_STORAGE__MEDIA__S3__BUCKET_NAME (1)
string
controllers.worker.containers.app.env.AUTHENTIK_STORAGE__MEDIA__S3__SECURE_URLS (1)
string
controllers.worker.containers.app.env.AUTHENTIK_STORAGE__MEDIA__S3__USE_SSL (1)
string
controllers.worker.containers.app.env.AUTHENTIK_WORKER__PROCESSES (1)
string
controllers.worker.containers.app.env.AUTHENTIK_WORKER__THREADS.resourceFieldRef.resource (1)
string
controllers.worker.containers.app.env.TZ (1)
string
controllers.worker.containers.app.envFrom[].secretRef.name (1)
string
controllers.worker.containers.app.image.repository (1)
string
controllers.worker.containers.app.image.tag (1)
string
controllers.worker.containers.app.probes.liveness.custom (1)
boolean
controllers.worker.containers.app.probes.liveness.enabled (1)
boolean
controllers.worker.containers.app.probes.liveness.spec.exec.command[] (1)
string
controllers.worker.containers.app.probes.liveness.spec.failureThreshold (1)
number
controllers.worker.containers.app.probes.liveness.spec.timeoutSeconds (1)
number
controllers.worker.containers.app.probes.readiness.custom (1)
boolean
controllers.worker.containers.app.probes.readiness.enabled (1)
boolean
controllers.worker.containers.app.probes.readiness.spec.exec.command[] (1)
string
controllers.worker.containers.app.probes.readiness.spec.timeoutSeconds (1)
number
controllers.worker.containers.app.probes.startup.custom (1)
boolean
controllers.worker.containers.app.probes.startup.enabled (1)
boolean
controllers.worker.containers.app.probes.startup.spec.exec.command[] (1)
string
controllers.worker.containers.app.probes.startup.spec.failureThreshold (1)
number
controllers.worker.containers.app.probes.startup.spec.initialDelaySeconds (1)
number
controllers.worker.containers.app.probes.startup.spec.periodSeconds (1)
number
controllers.worker.containers.app.probes.startup.spec.timeoutSeconds (1)
number
controllers.worker.containers.app.resources.limits.cpu (1)
string
controllers.worker.containers.app.resources.limits.memory (1)
string
controllers.worker.containers.app.resources.requests.cpu (1)
string
controllers.worker.containers.app.resources.requests.memory (1)
string
controllers.worker.containers.app.securityContext.allowPrivilegeEscalation (1)
boolean
controllers.worker.containers.app.securityContext.capabilities.drop[] (1)
string
controllers.worker.containers.app.securityContext.readOnlyRootFilesystem (1)
boolean
defaultPodOptions.securityContext.fsGroup (1)
number
defaultPodOptions.securityContext.fsGroupChangePolicy (1)
string
defaultPodOptions.securityContext.runAsGroup (1)
number
defaultPodOptions.securityContext.runAsNonRoot (1)
boolean
defaultPodOptions.securityContext.runAsUser (1)
number
persistence.tls.defaultMode (1)
number
persistence.tls.globalMounts[].path (1)
string
persistence.tls.name (1)
string
persistence.tls.type (1)
string
persistence.tmpfs.globalMounts[].path (1)
string
persistence.tmpfs.globalMounts[].subPath (1)
string
persistence.tmpfs.medium (1)
string
persistence.tmpfs.type (1)
string
postgres.enabled (1)
boolean
route.app.hostnames[] (1)
string
route.app.parentRefs[].name (1)
string
route.app.parentRefs[].namespace (1)
string
route.app.rules[].backendRefs[].identifier (1)
string
route.app.rules[].backendRefs[].port (1)
number
route.harden.hostnames[] (1)
string
route.harden.parentRefs[].name (1)
string
route.harden.parentRefs[].namespace (1)
string
route.harden.rules[].filters[].requestRedirect.hostname (1)
string
route.harden.rules[].filters[].requestRedirect.path.replaceFullPath (1)
string
route.harden.rules[].filters[].requestRedirect.path.type (1)
string
route.harden.rules[].filters[].requestRedirect.port (1)
number
route.harden.rules[].filters[].requestRedirect.statusCode (1)
number
route.harden.rules[].filters[].type (1)
string
route.harden.rules[].matches[].path.type (1)
string
route.harden.rules[].matches[].path.value (1)
string
service.app.controller (1)
string
service.app.forceRename (1)
string
service.app.ports.http.appProtocol (1)
string
service.app.ports.http.port (1)
number
service.app.ports.http.protocol (1)
string
service.app.ports.https.appProtocol (1)
string
service.app.ports.https.port (1)
number
service.app.ports.https.protocol (1)
string
service.app.ports.metrics.appProtocol (1)
string
service.app.ports.metrics.port (1)
number
service.app.ports.metrics.protocol (1)
string
service.ldap.controller (1)
string
service.ldap.ports.ldap-tcp.appProtocol (1)
string
service.ldap.ports.ldap-tcp.port (1)
number
service.ldap.ports.ldap-tcp.protocol (1)
string
service.ldap.ports.ldap-tcp.targetPort (1)
number
service.ldap.ports.ldap-udp.appProtocol (1)
string
service.ldap.ports.ldap-udp.port (1)
number
service.ldap.ports.ldap-udp.protocol (1)
string
service.ldap.ports.ldap-udp.targetPort (1)
number
service.ldap.ports.ldaps-tcp.appProtocol (1)
string
service.ldap.ports.ldaps-tcp.port (1)
number
service.ldap.ports.ldaps-tcp.protocol (1)
string
service.ldap.ports.ldaps-tcp.targetPort (1)
number
service.ldap.ports.ldaps-udp.appProtocol (1)
string
service.ldap.ports.ldaps-udp.port (1)
number
service.ldap.ports.ldaps-udp.protocol (1)
string
service.ldap.ports.ldaps-udp.targetPort (1)
number
service.ldap.primary (1)
boolean
serviceAccount.create (1)
boolean
serviceMonitor.authentik.endpoints[].interval (1)
string
serviceMonitor.authentik.endpoints[].path (1)
string
serviceMonitor.authentik.endpoints[].port (1)
string
serviceMonitor.authentik.endpoints[].scheme (1)
string
serviceMonitor.authentik.endpoints[].scrapeTimeout (1)
string
serviceMonitor.authentik.service.identifier (1)
string