101 lines
3.2 KiB
Go Template
101 lines
3.2 KiB
Go Template
<p align="center">
|
|
<img src="https://goauthentik.io/img/icon_top_brand_colour.svg" height="150" alt="authentik logo">
|
|
</p>
|
|
|
|
---
|
|
|
|
[](https://goauthentik.io/discord)
|
|
[](https://github.com/goauthentik/helm/actions/workflows/lint-test.yaml)
|
|
|
|
|
|
|
|
{{ template "chart.deprecationWarning" . }}
|
|
|
|
{{ template "chart.description" . }}
|
|
|
|
{{ template "chart.homepageLine" . }}
|
|
|
|
## Example values to get started:
|
|
|
|
```yaml
|
|
authentik:
|
|
secret_key: "PleaseGenerateA50CharKey"
|
|
# This sends anonymous usage-data, stack traces on errors and
|
|
# performance data to authentik.error-reporting.a7k.io, and is fully opt-in
|
|
error_reporting:
|
|
enabled: true
|
|
postgresql:
|
|
password: "ThisIsNotASecurePassword"
|
|
|
|
server:
|
|
ingress:
|
|
enabled: true
|
|
hosts:
|
|
- authentik.domain.tld
|
|
|
|
postgresql:
|
|
enabled: true
|
|
auth:
|
|
password: "ThisIsNotASecurePassword"
|
|
|
|
redis:
|
|
enabled: true
|
|
```
|
|
|
|
## Advanced values examples
|
|
|
|
<details>
|
|
<summary>External PostgreSQL and Redis</summary>
|
|
|
|
```yaml
|
|
authentik:
|
|
postgresql:
|
|
host: postgres.domain.tld
|
|
user: file:///postgres-creds/username
|
|
password: file:///postgres-creds/password
|
|
redis:
|
|
host: redis.domain.tld
|
|
server:
|
|
volumes:
|
|
- name: postgres-creds
|
|
secret:
|
|
secretName: authentik-postgres-credentials
|
|
volumeMounts:
|
|
- name: postgres-creds
|
|
mountPath: /postgres-creds
|
|
readOnly: true
|
|
worker:
|
|
volumes:
|
|
- name: postgres-creds
|
|
secret:
|
|
secretName: authentik-postgres-credentials
|
|
volumeMounts:
|
|
- name: postgres-creds
|
|
mountPath: /postgres-creds
|
|
readOnly: true
|
|
```
|
|
|
|
The secret `authentik-postgres-credentials` must have `username` and `password` keys.
|
|
</details>
|
|
|
|
{{ template "chart.maintainersSection" . }}
|
|
|
|
{{ template "chart.sourcesSection" . }}
|
|
|
|
{{ template "chart.requirementsSection" . }}
|
|
|
|
{{ template "chart.valuesSection" . }}
|
|
|
|
---
|
|
[affinity]: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/
|
|
[DNS configuration]: https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/
|
|
[HPA]: https://kubernetes.io/docs/tasks/run-application/horizontal-pod-autoscale/
|
|
[MetricRelabelConfigs]: https://prometheus.io/docs/prometheus/latest/configuration/configuration/#metric_relabel_configs
|
|
[Node selector]: https://kubernetes.io/docs/user-guide/node-selection/
|
|
[PodDisruptionBudget]: https://kubernetes.io/docs/concepts/workloads/pods/disruptions/#pod-disruption-budgets
|
|
[probe]: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle/#container-probes
|
|
[RelabelConfigs]: https://prometheus.io/docs/prometheus/latest/configuration/configuration/#relabel_config
|
|
[Tolerations]: https://kubernetes.io/docs/concepts/configuration/taint-and-toleration/
|
|
[TopologySpreadConstraints]: https://kubernetes.io/docs/concepts/workloads/pods/pod-topology-spread-constraints/
|
|
[values.yaml]: values.yaml
|