This commit is contained in:
Mike McFetridge
2026-07-20 09:23:17 -04:00
parent c1315882da
commit 72272e4006
3179 changed files with 562960 additions and 14 deletions
+14
View File
@@ -0,0 +1,14 @@
---
authentik:
secret_key: << authentik_secret_key >>
postgresql:
password: << database_password >>
<%- if email_enabled %>
email:
password: << email_password >>
<%- endif %>
<%- if not database_external %>
postgresql:
auth:
password: << database_password >>
<%- endif %>
+56
View File
@@ -0,0 +1,56 @@
---
global:
image:
repository: "ghcr.io/goauthentik/server"
tag: "2026.2.2"
pullPolicy: IfNotPresent
authentik:
postgresql:
name: << database_name >>
user: << database_user >>
<%- if database_external %>
host: << database_host >>
port: << database_port >>
<%- endif %>
<%- if email_enabled %>
email:
host: << email_host >>
port: << email_port >>
username: << email_username >>
use_tls: << email_use_tls | lower >>
from: << email_from >>
<%- endif %>
error_reporting:
enabled: << authentik_error_reporting | lower >>
log_level: << authentik_log_level >>
server:
service:
type: << network_mode >>
<%- if traefik_enabled %>
ingress:
enabled: true
ingressClassName: traefik
<%- if traefik_tls_enabled and traefik_tls_certmanager %>
annotations:
cert-manager.io/cluster-issuer: << certmanager_issuer >>
<%- endif %>
hosts:
- << traefik_host >>
<%- if traefik_tls_enabled %>
tls:
- secretName: << traefik_tls_secret >>
hosts:
- << traefik_host >>
<%- endif %>
<%- endif %>
postgresql:
<%- if database_external %>
enabled: false
<%- else %>
enabled: true
auth:
database: << database_name >>
username: << database_user >>
<%- endif %>
redis:
enabled: true
+273
View File
@@ -0,0 +1,273 @@
{
"slug": "authentik-helm",
"kind": "helm",
"metadata": {
"name": "Authentik",
"description": "Helm chart for Authentik, an open-source Identity Provider supporting OAuth2, SAML, and LDAP for flexible single sign-on and authentication.",
"tags": [],
"icon": {
"provider": "selfhst",
"id": "authentik"
},
"draft": false,
"version": {
"name": "2026.2.2",
"source_dep_name": "ghcr.io/goauthentik/server",
"source_dep_version": "2026.2.2"
}
},
"variables": [
{
"title": "Networking",
"name": "networking",
"items": [
{
"name": "network_mode",
"type": "str",
"title": "Network Mode",
"required": false,
"default": "ClusterIP",
"config": {
"placeholder": "ClusterIP"
}
}
]
},
{
"title": "Authentik Configuration",
"name": "authentik",
"items": [
{
"name": "authentik_secret_key",
"type": "secret",
"title": "Secret Key",
"required": false,
"config": {
"autogenerated": {
"kind": "base64",
"bytes": 60
}
}
},
{
"name": "authentik_log_level",
"type": "enum",
"title": "Authentik log level",
"required": false,
"default": "error",
"config": {
"options": [
"trace",
"debug",
"info",
"warning",
"error"
]
}
},
{
"name": "authentik_error_reporting",
"type": "bool",
"title": "Error Reporting",
"required": false,
"default": false
}
]
},
{
"title": "Database Configuration",
"name": "database",
"items": [
{
"name": "database_external",
"type": "bool",
"title": "External Database",
"required": false,
"default": false
},
{
"name": "database_host",
"type": "str",
"title": "Database host",
"required": false,
"default": "authentik-postgresql",
"needs": [
"database_external=true"
],
"config": {
"placeholder": "authentik-postgresql"
}
},
{
"name": "database_port",
"type": "int",
"title": "Database port",
"required": false,
"default": 5432,
"needs": [
"database_external=true"
],
"config": {
"placeholder": "5432"
}
},
{
"name": "database_name",
"type": "str",
"title": "Database name",
"required": false,
"default": "authentik",
"config": {
"placeholder": "authentik"
}
},
{
"name": "database_user",
"type": "str",
"title": "Database user",
"required": false,
"default": "authentik",
"config": {
"placeholder": "authentik"
}
},
{
"name": "database_password",
"type": "secret",
"title": "PostgreSQL database password",
"required": false,
"config": {
"autogenerated": {
"kind": "base64",
"bytes": 36
}
}
}
]
},
{
"title": "Email Configuration",
"name": "email",
"items": [
{
"name": "email_enabled",
"type": "bool",
"title": "Email",
"required": false,
"default": false
},
{
"name": "email_host",
"type": "str",
"title": "SMTP server hostname",
"required": false,
"config": {
"placeholder": "smtp.home.arpa"
}
},
{
"name": "email_port",
"type": "int",
"title": "SMTP server port",
"required": false,
"default": 587,
"config": {
"placeholder": "587"
}
},
{
"name": "email_username",
"type": "str",
"title": "SMTP username",
"required": false,
"default": "",
"config": {
"placeholder": "user@example.com"
}
},
{
"name": "email_password",
"type": "secret",
"title": "SMTP password",
"required": false,
"default": ""
},
{
"name": "email_from",
"type": "str",
"title": "From email address",
"required": false,
"config": {
"placeholder": "authentik@home.arpa"
}
},
{
"name": "email_use_tls",
"type": "bool",
"title": "SMTP TLS",
"required": false,
"default": true
}
]
},
{
"title": "Traefik Configuration",
"name": "traefik",
"items": [
{
"name": "traefik_enabled",
"type": "bool",
"title": "Traefik",
"required": false,
"default": false
},
{
"name": "traefik_host",
"type": "str",
"title": "Traefik hostname",
"required": true,
"config": {
"placeholder": "authentik.home.arpa"
}
},
{
"name": "traefik_tls_enabled",
"type": "bool",
"title": "TLS",
"required": false,
"default": false
},
{
"name": "traefik_tls_secret",
"type": "str",
"title": "TLS Secret",
"required": false,
"default": "authentik-tls",
"config": {
"placeholder": "authentik-tls"
}
},
{
"name": "traefik_tls_certmanager",
"type": "bool",
"title": "Cert Manager",
"required": false,
"default": false
},
{
"name": "certmanager_issuer",
"type": "str",
"title": "Issuer",
"required": false,
"default": "letsencrypt-prod",
"needs": [
"traefik_tls_certmanager=true"
],
"config": {
"placeholder": "letsencrypt-prod"
}
}
]
}
]
}