2020-11-15 21:42:02 +00:00
---
title: Kubernetes installation
---
2020-12-05 21:08:42 +00:00
For a mid to high-load installation, Kubernetes is recommended. authentik is installed using a helm-chart.
2020-11-15 21:42:02 +00:00
2021-04-17 09:06:21 +00:00
To install authentik using the helm chart, generate a password for the database and the cache, using `pwgen` or `openssl rand -base64 36` .
Create a values.yaml file with a minimum of these settings:
```yaml
2021-05-21 17:02:05 +00:00
authentik:
secret_key: "PleaseGenerateA50CharKey"
# This sends anonymous usage-data, stack traces on errors and
# performance data to sentry.beryju.org, and is fully opt-in
error_reporting:
enabled: true
postgresql:
password: "ThisIsNotASecurePassword"
ingress:
enabled: true
hosts:
- host: authentik.domain.tld
paths:
- path: "/"
pathType: Prefix
2021-04-17 09:06:21 +00:00
postgresql:
2021-05-21 17:02:05 +00:00
enabled: true
postgresqlPassword: "ThisIsNotASecurePassword"
2021-04-17 09:06:21 +00:00
redis:
2021-05-21 17:02:05 +00:00
enabled: true
2021-04-17 09:06:21 +00:00
```
2021-05-08 14:25:11 +00:00
See all configurable values on [artifacthub ](https://artifacthub.io/packages/helm/goauthentik/authentik ).
2021-04-17 09:06:21 +00:00
Afterwards, run these commands to install authentik:
2020-11-23 19:50:19 +00:00
```
2021-05-09 15:32:14 +00:00
helm repo add authentik https://charts.goauthentik.io
2020-11-23 19:50:19 +00:00
helm repo update
2021-05-09 15:32:14 +00:00
helm install authentik authentik/authentik -f values.yaml
2020-11-23 19:50:19 +00:00
```
2021-04-06 18:25:22 +00:00
This installation automatically applies database migrations on startup. After the installation is done, navigate to the `https://<ingress you've specified>/if/flow/initial-setup/` , to set a password for the akadmin user.
2020-11-15 21:42:02 +00:00
2021-01-04 23:41:10 +00:00
It is also recommended to configure global email credentials. These are used by authentik to notify you about alerts, configuration issues. They can also be used by [Email stages ](flow/stages/email/index.md ) to send verification/recovery emails.
