authentik helm release

authentik helm

No introduction found. Create it?

More popular helm chart found

authentik from goauthentik is more popular with 47 repositories.

Install

Install with:

helm repo add authentik oci://ghcr.io/goauthentik/helm-charts/authentik
helm install authentik authentik/authentik -f values.yaml

Examples

See examples from other people.

Major version:

Filter repos who also have:

Top Repositories (5 out of 22)

Name	Repo	Stars	Version	Timestamp
authentik	nicolerenee/infra	100	2025.10.2	4 days ago
authentik	joryirving/home-ops	189	2025.10.2	9 days ago
authentik	rafaribe/home-ops	83	2025.10.2	10 days ago
authentik	ishioni/homelab-ops	141	2025.10.2	14 days ago
authentik	drag0n141/home-ops	47	2025.10.2	3 months ago

Name

Repo

Stars

Version

Timestamp

authentik

nicolerenee/infra

100

2025.10.2

4 days ago

authentik

joryirving/home-ops

189

2025.10.2

9 days ago

authentik

rafaribe/home-ops

2025.10.2

10 days ago

authentik

ishioni/homelab-ops

141

2025.10.2

14 days ago

authentik

drag0n141/home-ops

2025.10.2

3 months ago

Values

See the most popular values for this chart:

Key	Types
global.envFrom[].secretRef.name (20) `authentik-secret`	string
global.deploymentStrategy.type (13) `RollingUpdate`	string
global.deploymentStrategy.rollingUpdate.maxSurge (1)	number
global.deploymentStrategy.rollingUpdate.maxUnavailable (1)	number
global.podAnnotations."secret.reloader.stakater.com/reload" (9) `authentik-secret`	string
global.podAnnotations."reloader.stakater.com/auto" (3) `true`	string
global.volumeMounts[].mountPath (8)	string
global.volumeMounts[].name (8)	string
global.volumeMounts[].readOnly (3) `true`	boolean
global.volumeMounts[].subPath (2)	string
global.volumes[].name (8)	string
global.volumes[].secret.secretName (3)	string
global.volumes[].secret.items[].key (2)	string
global.volumes[].secret.items[].path (2)	string
global.volumes[].secret.defaultMode (1)	number
global.volumes[].configMap.name (2)	string
global.volumes[].persistentVolumeClaim.claimName (2)	string
global.env[].name (7)	string
global.env[].value (7)	string
global.env[].valueFrom.secretKeyRef.key (4) `password`	string
global.env[].valueFrom.secretKeyRef.name (4)	string
global.deploymentAnnotations."secret.reloader.stakater.com/reload" (5) `authentik-secret`	string
global.deploymentAnnotations."reloader.stakater.com/auto" (2)	string
global.deploymentAnnotations."configmap.reloader.stakater.com/reload" (1)	string
global.securityContext.fsGroup (3) `1000`	number
global.securityContext.runAsGroup (2)	number
global.securityContext.runAsUser (2)	number
global.securityContext.fsGroupChangePolicy (1)	string
global.image.repository (2)	string
global.image.tag (2)	string
global.image.pullPolicy (1)	string
global.priorityClassName (2)	string
global.additionalLabels.postgres (1)	string
global.fullnameOverride (1)	string
global.podLabels."policy.gabe565.com/egress-geoip" (1)	string
global.podLabels."policy.gabe565.com/egress-kube-dns" (1)	string
global.podLabels."policy.gabe565.com/egress-kubeapi" (1)	string
global.podLabels."policy.gabe565.com/egress-namespace" (1)	string
global.podLabels."policy.gabe565.com/egress-world" (1)	string
global.podLabels."policy.gabe565.com/ingress-namespace" (1)	string
global.podLabels."policy.gabe565.com/ingress-nginx" (1)	string
global.podLabels."policy.gabe565.com/ingress-nginx-internal" (1)	string
global.podLabels."policy.gabe565.com/ingress-prometheus" (1)	string
global.storageClass (1)	string
global.topologySpreadConstraints[].maxSkew (1)	number
global.topologySpreadConstraints[].topologyKey (1)	string
global.topologySpreadConstraints[].whenUnsatisfiable (1)	string
worker.resources.limits.memory (15) `1Gi`	string
worker.resources.requests.cpu (15) `300m`	string
worker.resources.requests.memory (7)	string
worker.autoscaling.enabled (10) `true`	boolean
worker.autoscaling.minReplicas (10) `1`	number
worker.autoscaling.behavior.scaleDown.stabilizationWindowSeconds (3) `300`	number
worker.autoscaling.behavior.scaleUp.stabilizationWindowSeconds (3) `300`	number
worker.autoscaling.maxReplicas (3) `5`	number
worker.autoscaling.targetCPUUtilizationPercentage (3) `60`	number
worker.replicas (6) `1`	number
worker.volumeMounts[].mountPath (4)	string
worker.volumeMounts[].name (4)	string
worker.volumeMounts[].readOnly (3)	boolean
worker.volumes[].name (4)	string
worker.volumes[].secret.secretName (3)	string
worker.containerSecurityContext.readOnlyRootFilesystem (2)	boolean
worker.containerSecurityContext.allowPrivilegeEscalation (1)	boolean
worker.containerSecurityContext.capabilities.drop[] (1)	string
worker.containerSecurityContext.runAsNonRoot (1)	boolean
worker.containerSecurityContext.seccomProfile.type (1)	string
worker.metrics.enabled (2)	boolean
worker.metrics.serviceMonitor.enabled (2)	boolean
worker.metrics.prometheus.serviceMonitor.enabled (1)	boolean
worker.affinity.podAntiAffinity.preferredDuringSchedulingIgnoredDuringExecution[].podAffinityTerm.labelSelector.matchLabels."app.kubernetes.io/component" (1)	string
worker.affinity.podAntiAffinity.preferredDuringSchedulingIgnoredDuringExecution[].podAffinityTerm.topologyKey (1)	string
worker.affinity.podAntiAffinity.preferredDuringSchedulingIgnoredDuringExecution[].weight (1)	number
worker.affinity.podAntiAffinity.requiredDuringSchedulingIgnoredDuringExecution[].labelSelector.matchLabels."app.kubernetes.io/component" (1)	string
worker.affinity.podAntiAffinity.requiredDuringSchedulingIgnoredDuringExecution[].topologyKey (1)	string
worker.env[].name (1)	string
worker.env[].value (1)	string
worker.env[].valueFrom.secretKeyRef.key (1)	string
worker.env[].valueFrom.secretKeyRef.name (1)	string
worker.envFrom[].secretRef.name (1)	string
worker.extraContainers[].env[].name (1)	string
worker.extraContainers[].env[].value (1)	string
worker.extraContainers[].image (1)	string
worker.extraContainers[].name (1)	string
worker.extraContainers[].volumeMounts[].mountPath (1)	string
worker.extraContainers[].volumeMounts[].name (1)	string
worker.initContainers[].command[] (1)	string
worker.initContainers[].image (1)	string
worker.initContainers[].name (1)	string
worker.initContainers[].volumeMounts[].mountPath (1)	string
worker.initContainers[].volumeMounts[].name (1)	string
worker.initContainers[].volumeMounts[].readOnly (1)	boolean
worker.pdb.enabled (1)	boolean
worker.pdb.minAvailable (1)	number
worker.topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/component" (1)	string
worker.topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/instance" (1)	string
worker.topologySpreadConstraints[].maxSkew (1)	number
worker.topologySpreadConstraints[].topologyKey (1)	string
worker.topologySpreadConstraints[].whenUnsatisfiable (1)	string
server.metrics.serviceMonitor.enabled (14) `true`	boolean
server.metrics.serviceMonitor.interval (1)	string
server.metrics.enabled (12) `true`	boolean
server.metrics.prometheus.serviceMonitor.enabled (7) `true`	boolean
server.resources.limits.memory (14) `1Gi`	string
server.resources.limits.cpu (1)	string
server.resources.requests.cpu (14) `200m`	string
server.resources.requests.memory (7) `500Mi`	string
server.route.main.enabled (12) `true`	boolean
server.route.main.hostnames[] (12)	string
server.route.main.parentRefs[].name (12) `envoy-external`	string
server.route.main.parentRefs[].namespace (12) `network`	string
server.route.main.parentRefs[].sectionName (4) `https`	string
server.route.main.parentRefs[].group (1)	string
server.route.main.parentRefs[].kind (1)	string
server.route.main.annotations."gatus.home-operations.com/endpoint" (2)	string
server.route.main.annotations."gethomepage.dev/enabled" (2)	string
server.route.main.annotations."gethomepage.dev/group" (2)	string
server.route.main.annotations."gethomepage.dev/icon" (2)	string
server.route.main.annotations."gethomepage.dev/name" (2)	string
server.route.main.annotations."gethomepage.dev/app" (1)	string
server.route.main.annotations."gethomepage.dev/href" (1)	string
server.route.main.annotations."gethomepage.dev/namespace" (1)	string
server.route.main.annotations."gethomepage.dev/pod-selector" (1)	string
server.route.main.annotations."gethomepage.dev/widget.key" (1)	string
server.route.main.annotations."gethomepage.dev/widget.type" (1)	string
server.route.main.annotations."gethomepage.dev/widget.url" (1)	string
server.route.main.annotations."gethomepage.dev/widget.version" (1)	string
server.initContainers[].image (10)	string
server.initContainers[].name (10) `init-db`	string
server.initContainers[].envFrom[].secretRef.name (9) `authentik-secret`	string
server.initContainers[].command[] (1)	string
server.initContainers[].volumeMounts[].mountPath (1)	string
server.initContainers[].volumeMounts[].name (1)	string
server.initContainers[].volumeMounts[].readOnly (1)	boolean
server.autoscaling.enabled (9) `true`	boolean
server.autoscaling.minReplicas (9) `1`	number
server.autoscaling.behavior.scaleDown.stabilizationWindowSeconds (3) `300`	number
server.autoscaling.behavior.scaleUp.stabilizationWindowSeconds (3) `300`	number
server.autoscaling.maxReplicas (3) `5`	number
server.autoscaling.targetCPUUtilizationPercentage (3) `60`	number
server.replicas (6) `1`	number
server.volumeMounts[].mountPath (6)	string
server.volumeMounts[].name (6)	string
server.volumeMounts[].readOnly (3)	boolean
server.volumeMounts[].subPath (2)	string
server.volumes[].name (6)	string
server.volumes[].secret.secretName (3)	string
server.volumes[].configMap.name (2)	string
server.volumes[].persistentVolumeClaim.claimName (2)	string
server.ingress.enabled (3)	boolean
server.ingress.hosts[] (2)	string
server.ingress.tls[].hosts[] (2)	string
server.ingress.tls[].secretName (2)	string
server.ingress.annotations."external-dns.alpha.kubernetes.io/target" (1)	string
server.ingress.annotations."traefik.ingress.kubernetes.io/router.entrypoints" (1)	string
server.ingress.annotations."traefik.ingress.kubernetes.io/router.middlewares" (1)	string
server.ingress.ingressClassName (1)	string
server.ingress.paths[] (1)	string
server.ingress.pathType (1)	string
server.containerSecurityContext.allowPrivilegeEscalation (2)	boolean
server.containerSecurityContext.capabilities.drop[] (2)	string
server.containerSecurityContext.readOnlyRootFilesystem (2)	boolean
server.containerSecurityContext.runAsNonRoot (2)	boolean
server.containerSecurityContext.seccomProfile.type (2)	string
server.pdb.enabled (2)	boolean
server.pdb.maxUnavailable (1)	number
server.pdb.minAvailable (1)	number
server.annotations."reloader.stakater.com/auto" (1)	string
server.containerPorts.ldaps (1)	number
server.deploymentAnnotations."secret.reloader.stakater.com/reload" (1)	string
server.env[].name (1)	string
server.env[].value (1)	string
server.env[].valueFrom.secretKeyRef.key (1)	string
server.env[].valueFrom.secretKeyRef.name (1)	string
server.envFrom[].secretRef.name (1)	string
server.securityContext.fsGroup (1)	number
server.securityContext.runAsGroup (1)	number
server.securityContext.runAsUser (1)	number
server.topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/component" (1)	string
server.topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/instance" (1)	string
server.topologySpreadConstraints[].maxSkew (1)	number
server.topologySpreadConstraints[].topologyKey (1)	string
server.topologySpreadConstraints[].whenUnsatisfiable (1)	string
authentik.redis.host (13) `authentik-dragonfly`	string
authentik.redis.db (1)	number
authentik.redis.password (1)	string
authentik.email.port (10) `587`	number
authentik.email.use_tls (9) `true`	boolean
authentik.email.from (5)	string
authentik.email.host (4)	string
authentik.email.password (1)	string
authentik.email.timeout (1)	number
authentik.email.use_ssl (1)	boolean
authentik.email.username (1)	string
authentik.error_reporting.enabled (8) `false`	boolean
authentik.error_reporting.send_pii (4) `false`	boolean
authentik.log_level (7) `info`	string
authentik.postgresql.host (6)	string
authentik.postgresql.user (5) `file:///postgres-creds/username`	string
authentik.postgresql.password (3) `file:///postgres-creds/password`	string
authentik.postgresql.name (2)	string
authentik.postgresql.port (1)	number
authentik.disable_startup_analytics (3) `true`	boolean
authentik.disable_update_check (3) `true`	boolean
authentik.avatars (1)	string
authentik.events.context_processors.asn (1)	string
authentik.events.context_processors.geoip (1)	string
authentik.outposts.container_image_base (1)	string
authentik.secret_key (1)	string
authentik.security_key (1)	string
authentik.session_storage (1)	string
authentik.worker.concurrency (1)	number
prometheus.rules.enabled (13) `true`	boolean
redis.enabled (5) `false`	boolean
postgresql.enabled (4) `false`	boolean
geoip.enabled (3)	boolean
geoip.editionIds (2)	string
geoip.existingSecret.accountId (2)	string
geoip.existingSecret.licenseKey (2)	string
geoip.existingSecret.secretName (2)	string
geoip.image.repository (2)	string
geoip.image.tag (2)	string
geoip.resources.limits.memory (2)	string
geoip.resources.requests.cpu (2)	string
geoip.resources.requests.memory (1)	string
geoip.updateInterval (2)	number
geoip.accountId (1)	string
geoip.containerSecurityContext.readOnlyRootFilesystem (1)	boolean
geoip.env[].name (1)	string
geoip.env[].value (1)	string
geoip.licenseKey (1)	string
geoip.volumeMounts[].mountPath (1)	string
geoip.volumeMounts[].name (1)	string
additionalObjects[].apiVersion (1)	string
additionalObjects[].kind (1)	string
additionalObjects[].metadata.annotations."external-dns.alpha.kubernetes.io/hostname" (1)	string
additionalObjects[].metadata.name (1)	string
additionalObjects[].spec.parentRefs[].name (1)	string
additionalObjects[].spec.parentRefs[].namespace (1)	string
additionalObjects[].spec.parentRefs[].sectionName (1)	string
additionalObjects[].spec.rules[].backendRefs[].name (1)	string
additionalObjects[].spec.rules[].backendRefs[].port (1)	number

Key

Types

global.envFrom[].secretRef.name (20)