authentik helm release

authentik helm

No introduction found. Create it?

More popular helm chart found

authentik from goauthentik is more popular with 47 repositories.

Install

Install with:

helm repo add authentik oci://ghcr.io/goauthentik/helm-charts/authentik
helm install authentik authentik/authentik -f values.yaml

Examples

See examples from other people.

Major version:

Filter repos who also have:

Top Repositories (3 out of 7)

Name	Repo	Stars	Version	Timestamp
authentik	ishioni/homelab-ops	129	2025.2.4	8 days ago
authentik	joryirving/home-ops	163	2025.2.4	15 days ago
authentik	drag0n141/home-ops	34	2025.2.4	22 days ago

Name

Repo

Stars

Version

Timestamp

authentik

ishioni/homelab-ops

129

2025.2.4

8 days ago

authentik

joryirving/home-ops

163

2025.2.4

15 days ago

authentik

drag0n141/home-ops

2025.2.4

22 days ago

Values

See the most popular values for this chart:

Key	Types
global.envFrom[].secretRef.name (6) `authentik-secret`	string
global.deploymentStrategy.type (4) `RollingUpdate`	string
global.podAnnotations."secret.reloader.stakater.com/reload" (3) `authentik-secret`	string
global.podAnnotations."reloader.stakater.com/auto" (1) `true`	string
global.env[].name (2) `AUTHENTIK_SESSION_STORAGE`	string
global.env[].value (2) `db`	string
global.env[].valueFrom.secretKeyRef.key (1) `password`	string
global.env[].valueFrom.secretKeyRef.name (1) `authentik-pguser-authentik`	string
global.deploymentAnnotations."secret.reloader.stakater.com/reload" (1) `authentik-secret`	string
global.image.pullPolicy (1) `IfNotPresent`	string
global.image.repository (1) `ghcr.io/goauthentik/server`	string
global.image.tag (1) `2025.2.4`	string
global.storageClass (1) `ceph-block`	string
server.resources.limits.memory (5) `800Mi`	string
server.resources.requests.cpu (5) `200m`	string
server.resources.requests.memory (2) `500Mi`	string
server.metrics.serviceMonitor.enabled (4) `true`	boolean
server.metrics.enabled (3) `true`	boolean
server.metrics.prometheus.serviceMonitor.enabled (2) `true`	boolean
server.autoscaling.enabled (3) `true`	boolean
server.autoscaling.minReplicas (3) `1`	number
server.ingress.enabled (3) `true`	boolean
server.ingress.hosts[] (3) `- auth.${SECRET_DOMAIN}`	string
server.ingress.ingressClassName (3) `traefik-external`	string
server.ingress.paths[] (2) `- /`	string
server.ingress.annotations."external-dns.alpha.kubernetes.io/target" (1) `external.${SECRET_DOMAIN}`	string
server.ingress.annotations."gethomepage.dev/enabled" (1) `true`	string
server.ingress.annotations."gethomepage.dev/group" (1) `Infrastructure`	string
server.ingress.annotations."gethomepage.dev/icon" (1) `authentik.png`	string
server.ingress.annotations."gethomepage.dev/name" (1) `Authentik`	string
server.ingress.annotations."gethomepage.dev/pod-selector" (1) `app.kubernetes.io/name=authentik`	string
server.ingress.annotations."gethomepage.dev/widget.key" (1) `{{HOMEPAGE_VAR_AUTHENTIK_TOKEN}}`	string
server.ingress.annotations."gethomepage.dev/widget.type" (1) `authentik`	string
server.ingress.annotations."gethomepage.dev/widget.url" (1) `http://authentik-server.security`	string
server.ingress.annotations."traefik.ingress.kubernetes.io/router.entrypoints" (1) `websecure`	string
server.ingress.annotations."traefik.ingress.kubernetes.io/router.middlewares" (1) `networking-traefik-middleware-chain-no-auth@kubernetescrd`	string
server.ingress.pathType (1) `Prefix`	string
server.ingress.tls[].hosts[] (1) `- auth.${SECRET_DOMAIN}`	string
server.ingress.tls[].secretName (1) `${SECRET_DOMAIN/./-}-production-tls`	string
server.initContainers[].envFrom[].secretRef.name (2) `authentik-secret`	string
server.initContainers[].image (2) `ghcr.io/home-operations/postgres-init:17.4`	string
server.initContainers[].name (2) `init-db`	string
server.volumeMounts[].mountPath (2) `/postgres-creds`	string
server.volumeMounts[].name (2) `postgres-creds`	string
server.volumeMounts[].readOnly (2) `true`	boolean
server.volumes[].name (2) `postgres-creds`	string
server.volumes[].secret.secretName (2) `pg-authentik-app`	string
server.volumes[].persistentVolumeClaim.claimName (1) `authentik-media`	string
server.containerSecurityContext.allowPrivilegeEscalation (1) `false`	boolean
server.containerSecurityContext.capabilities.drop[] (1) `- ALL`	string
server.containerSecurityContext.runAsNonRoot (1) `true`	boolean
server.containerSecurityContext.seccomProfile.type (1) `RuntimeDefault`	string
server.deploymentAnnotations."secret.reloader.stakater.com/reload" (1) `pg-authentik-app`	string
server.replicas (1) `1`	number
server.securityContext.fsGroup (1) `1000`	number
server.securityContext.runAsGroup (1) `1000`	number
server.securityContext.runAsUser (1) `1000`	number
worker.resources.limits.memory (5) `1Gi`	string
worker.resources.requests.cpu (5) `200m`	string
worker.resources.requests.memory (2) `200Mi`	string
worker.autoscaling.enabled (3) `true`	boolean
worker.autoscaling.minReplicas (3) `1`	number
worker.replicas (2) `1`	number
worker.volumeMounts[].mountPath (2) `/postgres-creds`	string
worker.volumeMounts[].name (2) `postgres-creds`	string
worker.volumeMounts[].readOnly (2) `true`	boolean
worker.volumes[].name (2) `postgres-creds`	string
worker.volumes[].secret.secretName (2) `pg-authentik-app`	string
authentik.email.port (4) `2525`	number
authentik.email.use_tls (4) `false`	boolean
authentik.email.from (3) `authentik@dmfrey.com`	string
authentik.email.host (2) `smtp-relay.kube-system.svc.cluster.local`	string
authentik.redis.host (4) `authentik-dragonfly`	string
authentik.error_reporting.enabled (3) `false`	boolean
authentik.error_reporting.send_pii (2) `false`	boolean
authentik.log_level (3) `info`	string
authentik.postgresql.host (3) `file:///postgres-creds/host`	string
authentik.postgresql.password (3) `file:///postgres-creds/password`	string
authentik.postgresql.user (3) `file:///postgres-creds/username`	string
authentik.postgresql.port (1) `5432`	number
authentik.avatars (1) `gravatar,initials`	string
authentik.security_key (1)	string
prometheus.rules.enabled (3) `true`	boolean
redis.enabled (3) `true`	boolean
redis.master.persistence.existingClaim (1) `authentik-redis-v4`	string
geoip.editionIds (1) `GeoLite2-City`	string
geoip.enabled (1) `true`	boolean
geoip.existingSecret.accountId (1) `MAXMIND_ACCOUNT_ID`	string
geoip.existingSecret.licenseKey (1) `MAXMIND_LICENSE_KEY`	string
geoip.existingSecret.secretName (1) `authentik-secret`	string
geoip.image.repository (1) `ghcr.io/maxmind/geoipupdate`	string
geoip.image.tag (1) `v7.1.0`	string
geoip.resources.limits.memory (1) `512Mi`	string
geoip.resources.requests.cpu (1) `50m`	string
geoip.updateInterval (1) `8`	number
postgresql.enabled (1) `false`	boolean

Key

Types

global.envFrom[].secretRef.name (6)

authentik-secret

string

global.deploymentStrategy.type (4)

RollingUpdate

string

global.podAnnotations."secret.reloader.stakater.com/reload" (3)

authentik-secret

string

global.podAnnotations."reloader.stakater.com/auto" (1)

true

string

global.env[].name (2)

AUTHENTIK_SESSION_STORAGE

string

global.env[].value (2)

db

string

global.env[].valueFrom.secretKeyRef.key (1)

password

string

global.env[].valueFrom.secretKeyRef.name (1)

authentik-pguser-authentik

string

global.deploymentAnnotations."secret.reloader.stakater.com/reload" (1)

authentik-secret

string

global.image.pullPolicy (1)

IfNotPresent

string

global.image.repository (1)

ghcr.io/goauthentik/server

string

global.image.tag (1)

2025.2.4

string

global.storageClass (1)

ceph-block

string

server.resources.limits.memory (5)

800Mi

string

server.resources.requests.cpu (5)

200m

string

server.resources.requests.memory (2)

500Mi

string

server.metrics.serviceMonitor.enabled (4)

true

boolean

server.metrics.enabled (3)

true

boolean

server.metrics.prometheus.serviceMonitor.enabled (2)

true

boolean

server.autoscaling.enabled (3)

true

boolean

server.autoscaling.minReplicas (3)

number

server.ingress.enabled (3)

true

boolean

server.ingress.hosts[] (3)

- auth.${SECRET_DOMAIN}

string

server.ingress.ingressClassName (3)

traefik-external

string

server.ingress.paths[] (2)

- /

string

server.ingress.annotations."external-dns.alpha.kubernetes.io/target" (1)

external.${SECRET_DOMAIN}

string

server.ingress.annotations."gethomepage.dev/enabled" (1)

true

string

server.ingress.annotations."gethomepage.dev/group" (1)

Infrastructure

string

server.ingress.annotations."gethomepage.dev/icon" (1)

authentik.png

string

server.ingress.annotations."gethomepage.dev/name" (1)

Authentik

string

server.ingress.annotations."gethomepage.dev/pod-selector" (1)

app.kubernetes.io/name=authentik

string

server.ingress.annotations."gethomepage.dev/widget.key" (1)

{{HOMEPAGE_VAR_AUTHENTIK_TOKEN}}

string

server.ingress.annotations."gethomepage.dev/widget.type" (1)

authentik

string

server.ingress.annotations."gethomepage.dev/widget.url" (1)

http://authentik-server.security

string

server.ingress.annotations."traefik.ingress.kubernetes.io/router.entrypoints" (1)

websecure

string

server.ingress.annotations."traefik.ingress.kubernetes.io/router.middlewares" (1)

networking-traefik-middleware-chain-no-auth@kubernetescrd

string

server.ingress.pathType (1)

Prefix

string

server.ingress.tls[].hosts[] (1)

- auth.${SECRET_DOMAIN}

string

server.ingress.tls[].secretName (1)

${SECRET_DOMAIN/./-}-production-tls

string

server.initContainers[].envFrom[].secretRef.name (2)

authentik-secret

string

server.initContainers[].image (2)

ghcr.io/home-operations/postgres-init:17.4

string

server.initContainers[].name (2)

init-db

string

server.volumeMounts[].mountPath (2)

/postgres-creds

string

server.volumeMounts[].name (2)

postgres-creds

string

server.volumeMounts[].readOnly (2)

true

boolean

server.volumes[].name (2)

postgres-creds

string

server.volumes[].secret.secretName (2)

pg-authentik-app

string

server.volumes[].persistentVolumeClaim.claimName (1)

authentik-media

string

server.containerSecurityContext.allowPrivilegeEscalation (1)

false

boolean

server.containerSecurityContext.capabilities.drop[] (1)

- ALL

string

server.containerSecurityContext.runAsNonRoot (1)

true

boolean

server.containerSecurityContext.seccomProfile.type (1)

RuntimeDefault

string

server.deploymentAnnotations."secret.reloader.stakater.com/reload" (1)

pg-authentik-app

string

server.replicas (1)

number

server.securityContext.fsGroup (1)

number

server.securityContext.runAsGroup (1)

number

server.securityContext.runAsUser (1)

number

worker.resources.limits.memory (5)

1Gi

string

worker.resources.requests.cpu (5)

200m

string

worker.resources.requests.memory (2)

200Mi

string

worker.autoscaling.enabled (3)

true

boolean

worker.autoscaling.minReplicas (3)

number

worker.replicas (2)

number

worker.volumeMounts[].mountPath (2)

/postgres-creds

string

worker.volumeMounts[].name (2)

postgres-creds

string

worker.volumeMounts[].readOnly (2)

true

boolean

worker.volumes[].name (2)

postgres-creds

string

worker.volumes[].secret.secretName (2)

pg-authentik-app

string

authentik.email.port (4)

number

authentik.email.use_tls (4)

false

boolean

authentik.email.from (3)

authentik@dmfrey.com

string

authentik.email.host (2)

smtp-relay.kube-system.svc.cluster.local

string

authentik.redis.host (4)

authentik-dragonfly

string

authentik.error_reporting.enabled (3)

false

boolean

authentik.error_reporting.send_pii (2)

false

boolean

authentik.log_level (3)

info

string

authentik.postgresql.host (3)

file:///postgres-creds/host

string

authentik.postgresql.password (3)

file:///postgres-creds/password

string

authentik.postgresql.user (3)

file:///postgres-creds/username

string

authentik.postgresql.port (1)

number

authentik.avatars (1)

gravatar,initials

string

authentik.security_key (1)

string

prometheus.rules.enabled (3)

true

boolean

redis.enabled (3)

true

boolean

redis.master.persistence.existingClaim (1)

authentik-redis-v4

string

geoip.editionIds (1)

GeoLite2-City

string

geoip.enabled (1)

true

boolean

geoip.existingSecret.accountId (1)

MAXMIND_ACCOUNT_ID

string

geoip.existingSecret.licenseKey (1)

MAXMIND_LICENSE_KEY

string

geoip.existingSecret.secretName (1)

authentik-secret

string

geoip.image.repository (1)

ghcr.io/maxmind/geoipupdate

string

geoip.image.tag (1)

v7.1.0

string

geoip.resources.limits.memory (1)

512Mi

string

geoip.resources.requests.cpu (1)

50m

string

geoip.updateInterval (1)

number

postgresql.enabled (1)

false

boolean