authentik helm

No introduction found. Create it?

More popular helm chart found

authentik from goauthentik is more popular with 39 repositories.

Install

Install with:

helm repo add authentik oci://ghcr.io/goauthentik/helm-charts/authentik
helm install authentik authentik/authentik -f values.yaml

Examples

See examples from other people.

Top Repositories (5 out of 30)

NameRepoStarsVersionTimestamp
authentikgabe565/home-ops372026.2.24 days ago
authentikishioni/homelab-ops1572026.2.214 days ago
authentikjoryirving/home-ops2122026.2.214 days ago
authentikrafaribe/home-ops962026.2.221 days ago
authentiknicolerenee/infra1092026.2.223 days ago

Values

See the most popular values for this chart:

KeyTypes
worker.resources.limits.memory (26)
1Gi
string
worker.resources.limits.cpu (1)
string
worker.resources.requests.cpu (25)
50m
string
worker.resources.requests.memory (15)
512Mi
string
worker.replicas (14)
1
number
worker.autoscaling.enabled (11)
true
boolean
worker.autoscaling.minReplicas (11)
1
number
worker.autoscaling.maxReplicas (6)
5
number
worker.autoscaling.targetCPUUtilizationPercentage (5)
60
number
worker.autoscaling.behavior.scaleDown.stabilizationWindowSeconds (4)
300
number
worker.autoscaling.behavior.scaleUp.stabilizationWindowSeconds (4)
300
number
worker.autoscaling.targetMemoryUtilizationPercentage (1)
number
worker.volumeMounts[].mountPath (7)
/postgres-creds
string
worker.volumeMounts[].name (7)
postgres-creds
string
worker.volumeMounts[].readOnly (5)
true
boolean
worker.volumes[].name (7)
postgres-creds
string
worker.volumes[].secret.secretName (6)
string
worker.volumes[].persistentVolumeClaim.claimName (1)
string
worker.metrics.enabled (5)
true
boolean
worker.metrics.serviceMonitor.enabled (4)
true
boolean
worker.metrics.serviceMonitor.scrapeTimeout (1)
string
worker.metrics.prometheus.serviceMonitor.enabled (2)
boolean
worker.pdb.enabled (4)
true
boolean
worker.pdb.minAvailable (4)
1
number
worker.pdb.maxUnavailable (1)
number
worker.containerSecurityContext.readOnlyRootFilesystem (3)
true
boolean
worker.containerSecurityContext.allowPrivilegeEscalation (2)
boolean
worker.containerSecurityContext.capabilities.drop[] (2)
string
worker.containerSecurityContext.runAsNonRoot (2)
boolean
worker.containerSecurityContext.seccomProfile.type (2)
string
worker.env[].name (2)
string
worker.env[].value (2)
string
worker.env[].valueFrom.secretKeyRef.key (1)
string
worker.env[].valueFrom.secretKeyRef.name (1)
string
worker.envFrom[].secretRef.name (2)
string
worker.extraContainers[].env[].name (2)
string
worker.extraContainers[].env[].value (2)
string
worker.extraContainers[].image (2)
string
worker.extraContainers[].name (2)
string
worker.extraContainers[].volumeMounts[].mountPath (2)
string
worker.extraContainers[].volumeMounts[].name (2)
string
worker.affinity.podAntiAffinity.preferredDuringSchedulingIgnoredDuringExecution[].podAffinityTerm.labelSelector.matchLabels."app.kubernetes.io/component" (1)
string
worker.affinity.podAntiAffinity.preferredDuringSchedulingIgnoredDuringExecution[].podAffinityTerm.topologyKey (1)
string
worker.affinity.podAntiAffinity.preferredDuringSchedulingIgnoredDuringExecution[].weight (1)
number
worker.affinity.podAntiAffinity.requiredDuringSchedulingIgnoredDuringExecution[].labelSelector.matchLabels."app.kubernetes.io/component" (1)
string
worker.affinity.podAntiAffinity.requiredDuringSchedulingIgnoredDuringExecution[].topologyKey (1)
string
worker.dnsConfig.options[].name (1)
string
worker.dnsConfig.options[].value (1)
string
worker.initContainers[].command[] (1)
string
worker.initContainers[].image (1)
string
worker.initContainers[].name (1)
string
worker.initContainers[].volumeMounts[].mountPath (1)
string
worker.initContainers[].volumeMounts[].name (1)
string
worker.initContainers[].volumeMounts[].readOnly (1)
boolean
worker.podAnnotations."reloader.stakater.com/auto" (1)
string
worker.podLabels."ingress.samoth.eu/vmagent" (1)
string
worker.priorityClassName (1)
string
worker.securityContext.fsGroup (1)
number
worker.securityContext.runAsGroup (1)
number
worker.securityContext.runAsUser (1)
number
worker.serviceAccount.create (1)
boolean
worker.serviceAccountName (1)
string
worker.topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/component" (1)
string
worker.topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/instance" (1)
string
worker.topologySpreadConstraints[].maxSkew (1)
number
worker.topologySpreadConstraints[].topologyKey (1)
string
worker.topologySpreadConstraints[].whenUnsatisfiable (1)
string
global.envFrom[].secretRef.name (24)
authentik-secret
string
global.deploymentStrategy.type (16)
RollingUpdate
string
global.deploymentStrategy.rollingUpdate.maxSurge (2)
number
global.deploymentStrategy.rollingUpdate.maxUnavailable (2)
number
global.env[].name (12)
string
global.env[].value (11)
string
global.env[].valueFrom.secretKeyRef.key (6)
password
string
global.env[].valueFrom.secretKeyRef.name (6)
string
global.volumeMounts[].mountPath (10)
string
global.volumeMounts[].name (10)
string
global.volumeMounts[].readOnly (4)
true
boolean
global.volumeMounts[].subPath (2)
string
global.volumes[].name (10)
string
global.volumes[].configMap.name (3)
string
global.volumes[].csi.driver (2)
string
global.volumes[].csi.readOnly (2)
boolean
global.volumes[].csi.volumeAttributes."csi.cert-manager.io/common-name" (2)
string
global.volumes[].csi.volumeAttributes."csi.cert-manager.io/dns-names" (2)
string
global.volumes[].csi.volumeAttributes."csi.cert-manager.io/issuer-kind" (2)
string
global.volumes[].csi.volumeAttributes."csi.cert-manager.io/issuer-name" (2)
string
global.volumes[].csi.volumeAttributes."csi.cert-manager.io/key-algorithm" (2)
string
global.volumes[].csi.volumeAttributes."csi.cert-manager.io/key-encoding" (2)
string
global.volumes[].csi.volumeAttributes."csi.cert-manager.io/key-size" (2)
string
global.volumes[].csi.volumeAttributes."csi.cert-manager.io/key-usages" (2)
string
global.volumes[].persistentVolumeClaim.claimName (2)
string
global.volumes[].secret.items[].key (2)
string
global.volumes[].secret.items[].path (2)
string
global.volumes[].secret.secretName (2)
string
global.podAnnotations."secret.reloader.stakater.com/reload" (9)
authentik-secret
string
global.podAnnotations."reloader.stakater.com/auto" (5)
true
string
global.podAnnotations."k8s.ksgate.org/database-applied" (1)
string
global.podAnnotations."k8s.ksgate.org/postgres-ready" (1)
string
global.podAnnotations."k8s.ksgate.org/postgres-service" (1)
string
global.deploymentAnnotations."secret.reloader.stakater.com/reload" (7)
authentik-secret
string
global.deploymentAnnotations."reloader.stakater.com/auto" (4)
true
string
global.deploymentAnnotations."configmap.reloader.stakater.com/reload" (2)
string
global.securityContext.fsGroup (4)
1000
number
global.securityContext.runAsGroup (3)
1000
number
global.securityContext.runAsUser (3)
1000
number
global.securityContext.fsGroupChangePolicy (2)
string
global.image.repository (3)
ghcr.io/goauthentik/server
string
global.image.tag (3)
string
global.image.pullPolicy (1)
string
global.additionalLabels.postgres (2)
string
global.fullnameOverride (2)
string
global.priorityClassName (2)
string
global.addPrometheusAnnotations (1)
boolean
global.podLabels."egress.samoth.eu/database" (1)
string
global.podLabels."egress.samoth.eu/kube-apiserver" (1)
string
global.podLabels."ingress.samoth.eu/envoy-internal" (1)
string
global.podLabels."ingress.samoth.eu/kube-apiserver" (1)
string
global.podLabels."policy.gabe565.com/egress-geoip" (1)
string
global.podLabels."policy.gabe565.com/egress-kube-dns" (1)
string
global.podLabels."policy.gabe565.com/egress-kubeapi" (1)
string
global.podLabels."policy.gabe565.com/egress-namespace" (1)
string
global.podLabels."policy.gabe565.com/egress-world" (1)
string
global.podLabels."policy.gabe565.com/ingress-envoy-public" (1)
string
global.podLabels."policy.gabe565.com/ingress-namespace" (1)
string
global.podLabels."policy.gabe565.com/ingress-prometheus" (1)
string
global.securityClassName (1)
string
global.storageClass (1)
string
global.topologySpreadConstraints[].maxSkew (1)
number
global.topologySpreadConstraints[].topologyKey (1)
string
global.topologySpreadConstraints[].whenUnsatisfiable (1)
string
server.resources.limits.memory (24)
1Gi
string
server.resources.limits.cpu (2)
string
server.resources.requests.cpu (24)
50m
string
server.resources.requests.memory (15)
512Mi
string
server.route.main.enabled (23)
true
boolean
server.route.main.hostnames[] (23)
- auth.${SECRET_DOMAIN}
string
server.route.main.parentRefs[].name (23)
envoy-external
string
server.route.main.parentRefs[].namespace (23)
network
string
server.route.main.parentRefs[].sectionName (9)
https
string
server.route.main.parentRefs[].group (2)
string
server.route.main.parentRefs[].kind (2)
string
server.route.main.annotations."gethomepage.dev/enabled" (3)
true
string
server.route.main.annotations."gethomepage.dev/group" (3)
Infrastructure
string
server.route.main.annotations."gethomepage.dev/icon" (3)
string
server.route.main.annotations."gethomepage.dev/name" (3)
Authentik
string
server.route.main.annotations."gatus.home-operations.com/endpoint" (2)
string
server.route.main.annotations."gethomepage.dev/pod-selector" (2)
string
server.route.main.annotations."gethomepage.dev/widget.key" (2)
string
server.route.main.annotations."gethomepage.dev/widget.type" (2)
string
server.route.main.annotations."gethomepage.dev/widget.url" (2)
string
server.route.main.annotations."gethomepage.dev/widget.version" (2)
string
server.route.main.annotations."external-dns.alpha.kubernetes.io/target" (1)
string
server.route.main.annotations."gatus.home-operations.com/enabled" (1)
string
server.route.main.annotations."gethomepage.dev/app" (1)
string
server.route.main.annotations."gethomepage.dev/description" (1)
string
server.route.main.annotations."gethomepage.dev/href" (1)
string
server.route.main.annotations."gethomepage.dev/namespace" (1)
string
server.route.main.additionalRules[].backendRefs[].name (1)
string
server.route.main.additionalRules[].backendRefs[].port (1)
number
server.route.main.additionalRules[].matches[].path.type (1)
string
server.route.main.additionalRules[].matches[].path.value (1)
string
server.route.main.rules[].backendRefs[].name (1)
string
server.route.main.rules[].backendRefs[].port (1)
number
server.metrics.serviceMonitor.enabled (22)
true
boolean
server.metrics.serviceMonitor.interval (1)
string
server.metrics.serviceMonitor.scrapeTimeout (1)
string
server.metrics.enabled (21)
true
boolean
server.metrics.prometheus.serviceMonitor.enabled (7)
true
boolean
server.initContainers[].image (14)
ghcr.io/home-operations/postgres-init:18
string
server.initContainers[].name (14)
init-db
string
server.initContainers[].envFrom[].secretRef.name (13)
authentik-secret
string
server.initContainers[].command[] (1)
string
server.initContainers[].volumeMounts[].mountPath (1)
string
server.initContainers[].volumeMounts[].name (1)
string
server.initContainers[].volumeMounts[].readOnly (1)
boolean
server.replicas (12)
1
number
server.autoscaling.enabled (10)
true
boolean
server.autoscaling.minReplicas (10)
1
number
server.autoscaling.maxReplicas (5)
5
number
server.autoscaling.targetCPUUtilizationPercentage (5)
60
number
server.autoscaling.behavior.scaleDown.stabilizationWindowSeconds (4)
300
number
server.autoscaling.behavior.scaleUp.stabilizationWindowSeconds (4)
300
number
server.autoscaling.targetMemoryUtilizationPercentage (1)
number
server.volumeMounts[].mountPath (7)
string
server.volumeMounts[].name (7)
string
server.volumeMounts[].readOnly (5)
true
boolean
server.volumeMounts[].subPath (2)
string
server.volumes[].name (7)
string
server.volumes[].secret.secretName (5)
string
server.volumes[].configMap.name (2)
string
server.volumes[].persistentVolumeClaim.claimName (2)
string
server.pdb.enabled (5)
true
boolean
server.pdb.minAvailable (4)
1
number
server.pdb.maxUnavailable (2)
number
server.containerSecurityContext.allowPrivilegeEscalation (3)
false
boolean
server.containerSecurityContext.capabilities.drop[] (3)
- ALL
string
server.containerSecurityContext.readOnlyRootFilesystem (3)
true
boolean
server.containerSecurityContext.runAsNonRoot (3)
true
boolean
server.containerSecurityContext.seccomProfile.type (2)
string
server.env[].name (2)
string
server.env[].value (2)
string
server.env[].valueFrom.secretKeyRef.key (1)
string
server.env[].valueFrom.secretKeyRef.name (1)
string
server.envFrom[].secretRef.name (2)
string
server.ingress.enabled (2)
boolean
server.ingress.ingressClassName (1)
string
server.securityContext.fsGroup (2)
number
server.securityContext.runAsGroup (2)
number
server.securityContext.runAsUser (2)
number
server.annotations."reloader.stakater.com/auto" (1)
string
server.containerPorts.ldaps (1)
number
server.deploymentAnnotations."secret.reloader.stakater.com/reload" (1)
string
server.podAnnotations."reloader.stakater.com/auto" (1)
string
server.podLabels."ingress.samoth.eu/vmagent" (1)
string
server.priorityClassName (1)
string
server.service.clusterIP (1)
string
server.serviceAccountName (1)
string
server.topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/component" (1)
string
server.topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/instance" (1)
string
server.topologySpreadConstraints[].maxSkew (1)
number
server.topologySpreadConstraints[].topologyKey (1)
string
server.topologySpreadConstraints[].whenUnsatisfiable (1)
string
prometheus.rules.enabled (19)
true
boolean
authentik.email.port (11)
587
number
authentik.email.use_tls (10)
true
boolean
authentik.email.from (7)
string
authentik.email.host (6)
string
authentik.email.use_ssl (2)
boolean
authentik.email.password (1)
string
authentik.email.timeout (1)
number
authentik.email.username (1)
string
authentik.error_reporting.enabled (11)
false
boolean
authentik.error_reporting.send_pii (5)
false
boolean
authentik.error_reporting.enable (1)
boolean
authentik.error_reporting.environment (1)
string
authentik.log_level (10)
info
string
authentik.redis.host (10)
authentik-dragonfly
string
authentik.redis.db (1)
number
authentik.postgresql.host (9)
string
authentik.postgresql.user (8)
file:///postgres-creds/username
string
authentik.postgresql.password (6)
file:///postgres-creds/password
string
authentik.postgresql.name (5)
authentik
string
authentik.postgresql.port (3)
5432
number
authentik.postgresql.enabled (1)
boolean
authentik.disable_startup_analytics (4)
true
boolean
authentik.disable_update_check (4)
true
boolean
authentik.avatars (2)
string
authentik.outposts.container_image_base (2)
string
authentik.enabled (1)
boolean
authentik.events.context_processors.asn (1)
string
authentik.events.context_processors.geoip (1)
string
authentik.secret_key (1)
string
authentik.security_key (1)
string
authentik.session_storage (1)
string
authentik.worker.concurrency (1)
number
redis.enabled (9)
false
boolean
postgresql.enabled (8)
false
boolean
geoip.enabled (4)
true
boolean
geoip.existingSecret.accountId (3)
string
geoip.existingSecret.licenseKey (3)
string
geoip.existingSecret.secretName (3)
authentik-secret
string
geoip.editionIds (2)
string
geoip.image.repository (2)
string
geoip.image.tag (2)
string
geoip.resources.limits.memory (2)
string
geoip.resources.requests.cpu (2)
string
geoip.resources.requests.memory (1)
string
geoip.updateInterval (2)
number
geoip.accountId (1)
string
geoip.containerSecurityContext.readOnlyRootFilesystem (1)
boolean
geoip.env[].name (1)
string
geoip.env[].value (1)
string
geoip.licenseKey (1)
string
geoip.volumeMounts[].mountPath (1)
string
geoip.volumeMounts[].name (1)
string
additionalObjects[].apiVersion (1)
string
additionalObjects[].kind (1)
string
additionalObjects[].metadata.annotations."external-dns.alpha.kubernetes.io/hostname" (1)
string
additionalObjects[].metadata.name (1)
string
additionalObjects[].spec.parentRefs[].name (1)
string
additionalObjects[].spec.parentRefs[].namespace (1)
string
additionalObjects[].spec.parentRefs[].sectionName (1)
string
additionalObjects[].spec.rules[].backendRefs[].name (1)
string
additionalObjects[].spec.rules[].backendRefs[].port (1)
number
blueprints.configMaps[] (1)
string
postgres.enabled (1)
boolean
serviceAccount.create (1)
boolean