authentik helm

No introduction found. Create it?

More popular helm chart found

authentik from goauthentik is more popular with 48 repositories.

Install

Install with:

helm repo add authentik oci://ghcr.io/goauthentik/helm-charts/authentik
helm install authentik authentik/authentik -f values.yaml

Examples

See examples from other people.

Top Repositories (3 out of 8)

NameRepoStarsVersionTimestamp
authentikishioni/homelab-ops1322025.4.12 days ago
authentikjoryirving/home-ops1642025.4.12 days ago
authentikdrag0n141/home-ops372025.4.12 months ago

Values

See the most popular values for this chart:

KeyTypes
global.envFrom[].secretRef.name (7)
authentik-secret
string
global.deploymentStrategy.type (4)
RollingUpdate
string
global.podAnnotations."secret.reloader.stakater.com/reload" (3)
authentik-secret
string
global.podAnnotations."reloader.stakater.com/auto" (1)
true
string
global.deploymentAnnotations."secret.reloader.stakater.com/reload" (2)
authentik-secret
string
global.env[].name (1)
AUTHENTIK_POSTGRESQL__NAME
AUTHENTIK_POSTGRESQL__HOST
AUTHENTIK_POSTGRESQL__USER
AUTHENTIK_POSTGRESQL__PASSWORD
AUTHENTIK_POSTGRESQL__USE_PGBOUNCER
AUTHENTIK_POSTGRESQL__SSLMODE
string
global.env[].value (1)
authentik
authentik-pgbouncer.security.svc
authentik
true
require
string
global.env[].valueFrom.secretKeyRef.key (1)
password
string
global.env[].valueFrom.secretKeyRef.name (1)
authentik-pguser-authentik
string
global.image.pullPolicy (1)
IfNotPresent
string
global.image.repository (1)
ghcr.io/goauthentik/server
string
global.image.tag (1)
2025.4.1
string
global.storageClass (1)
ceph-block
string
server.resources.limits.memory (6)
800Mi
string
server.resources.requests.cpu (6)
50m
string
server.resources.requests.memory (3)
500Mi
string
server.metrics.serviceMonitor.enabled (5)
true
boolean
server.metrics.enabled (4)
true
boolean
server.metrics.prometheus.serviceMonitor.enabled (2)
true
boolean
server.autoscaling.enabled (3)
true
boolean
server.autoscaling.minReplicas (3)
1
number
server.autoscaling.behavior.scaleDown.stabilizationWindowSeconds (1)
300
number
server.autoscaling.behavior.scaleUp.stabilizationWindowSeconds (1)
300
number
server.autoscaling.maxReplicas (1)
5
number
server.autoscaling.targetCPUUtilizationPercentage (1)
60
number
server.initContainers[].envFrom[].secretRef.name (3)
authentik-secret
string
server.initContainers[].image (3)
ghcr.io/home-operations/postgres-init:17.5
string
server.initContainers[].name (3)
init-db
string
server.ingress.enabled (2)
true
boolean
server.ingress.hosts[] (2)
- auth.${SECRET_DOMAIN}
string
server.ingress.ingressClassName (2)
traefik-external
string
server.ingress.paths[] (2)
- /
string
server.ingress.annotations."external-dns.alpha.kubernetes.io/target" (1)
external.${SECRET_DOMAIN}
string
server.ingress.annotations."gethomepage.dev/enabled" (1)
true
string
server.ingress.annotations."gethomepage.dev/group" (1)
Infrastructure
string
server.ingress.annotations."gethomepage.dev/icon" (1)
authentik.png
string
server.ingress.annotations."gethomepage.dev/name" (1)
Authentik
string
server.ingress.annotations."gethomepage.dev/pod-selector" (1)
app.kubernetes.io/name=authentik
string
server.ingress.annotations."gethomepage.dev/widget.key" (1)
{{HOMEPAGE_VAR_AUTHENTIK_TOKEN}}
string
server.ingress.annotations."gethomepage.dev/widget.type" (1)
authentik
string
server.ingress.annotations."gethomepage.dev/widget.url" (1)
http://authentik-server.security
string
server.ingress.annotations."traefik.ingress.kubernetes.io/router.entrypoints" (1)
websecure
string
server.ingress.annotations."traefik.ingress.kubernetes.io/router.middlewares" (1)
networking-traefik-middleware-chain-no-auth@kubernetescrd
string
server.ingress.pathType (1)
Prefix
string
server.ingress.tls[].hosts[] (1)
- auth.${SECRET_DOMAIN}
string
server.ingress.tls[].secretName (1)
${SECRET_DOMAIN/./-}-production-tls
string
server.replicas (2)
1
number
server.volumeMounts[].mountPath (2)
/postgres-creds
string
server.volumeMounts[].name (2)
postgres-creds
string
server.volumeMounts[].readOnly (2)
true
boolean
server.volumes[].name (2)
postgres-creds
string
server.volumes[].secret.secretName (2)
pg-authentik-app
string
server.volumes[].persistentVolumeClaim.claimName (1)
authentik-media
string
server.containerSecurityContext.allowPrivilegeEscalation (1)
false
boolean
server.containerSecurityContext.capabilities.drop[] (1)
- ALL
string
server.containerSecurityContext.runAsNonRoot (1)
true
boolean
server.containerSecurityContext.seccomProfile.type (1)
RuntimeDefault
string
server.deploymentAnnotations."secret.reloader.stakater.com/reload" (1)
pg-authentik-app
string
server.route.main.enabled (1)
true
boolean
server.route.main.hostnames[] (1)
- auth.local.martinbjeldbak.com
string
server.route.main.parentRefs[].name (1)
internal
string
server.route.main.parentRefs[].namespace (1)
kube-system
string
server.route.main.parentRefs[].sectionName (1)
https
string
server.securityContext.fsGroup (1)
1000
number
server.securityContext.runAsGroup (1)
1000
number
server.securityContext.runAsUser (1)
1000
number
worker.resources.limits.memory (6)
1200Mi
string
worker.resources.requests.cpu (6)
50m
string
worker.resources.requests.memory (3)
500Mi
string
worker.autoscaling.enabled (3)
true
boolean
worker.autoscaling.minReplicas (3)
1
number
worker.autoscaling.behavior.scaleDown.stabilizationWindowSeconds (1)
300
number
worker.autoscaling.behavior.scaleUp.stabilizationWindowSeconds (1)
300
number
worker.autoscaling.maxReplicas (1)
5
number
worker.autoscaling.targetCPUUtilizationPercentage (1)
60
number
worker.replicas (3)
1
number
worker.volumeMounts[].mountPath (2)
/postgres-creds
string
worker.volumeMounts[].name (2)
postgres-creds
string
worker.volumeMounts[].readOnly (2)
true
boolean
worker.volumes[].name (2)
postgres-creds
string
worker.volumes[].secret.secretName (2)
pg-authentik-app
string
authentik.email.port (5)
2525
number
authentik.email.use_tls (5)
false
boolean
authentik.email.from (3)
authentik@dmfrey.com
string
authentik.email.host (2)
smtp-relay.kube-system.svc.cluster.local
string
authentik.redis.host (5)
dragonfly.databases.svc.cluster.local
string
authentik.redis.password (1)

string
authentik.log_level (4)
info
string
authentik.error_reporting.enabled (3)
false
boolean
authentik.error_reporting.send_pii (3)
false
boolean
authentik.postgresql.host (3)
file:///postgres-creds/host
string
authentik.postgresql.password (3)
file:///postgres-creds/password
string
authentik.postgresql.user (3)
file:///postgres-creds/username
string
authentik.postgresql.port (1)
5432
number
authentik.avatars (1)
gravatar,initials
string
authentik.security_key (1)

string
authentik.session_storage (1)
db
string
authentik.worker.concurrency (1)
4
number
prometheus.rules.enabled (4)
true
boolean
redis.enabled (4)
false
boolean
redis.master.persistence.existingClaim (1)
authentik-redis-v4
string
postgresql.enabled (2)
false
boolean
geoip.editionIds (1)
GeoLite2-City
string
geoip.enabled (1)
true
boolean
geoip.existingSecret.accountId (1)
MAXMIND_ACCOUNT_ID
string
geoip.existingSecret.licenseKey (1)
MAXMIND_LICENSE_KEY
string
geoip.existingSecret.secretName (1)
authentik-secret
string
geoip.image.repository (1)
ghcr.io/maxmind/geoipupdate
string
geoip.image.tag (1)
v7.1.0
string
geoip.resources.limits.memory (1)
512Mi
string
geoip.resources.requests.cpu (1)
50m
string
geoip.updateInterval (1)
8
number