This repository has been archived on 2024-05-31. You can view files and clone it, but cannot push or open issues or pull requests.
authentik/website/docs/installation/kubernetes.md

101 lines
2.8 KiB
Markdown
Raw Normal View History

---
title: Kubernetes installation
---
2020-12-05 21:08:42 +00:00
For a mid to high-load installation, Kubernetes is recommended. authentik is installed using a helm-chart.
2020-12-05 21:08:42 +00:00
To install authentik using the helm chart, run these commands:
```
2020-12-05 21:08:42 +00:00
helm repo add authentik https://docker.beryju.org/chartrepo/authentik
helm repo update
2020-12-05 21:08:42 +00:00
helm install authentik/authentik --devel -f values.yaml
```
2020-12-05 21:08:42 +00:00
This installation automatically applies database migrations on startup. After the installation is done, you can use `akadmin` as username and password.
It is also recommended to configure global email credentials. These are used by authentik to notify you about alerts, configuration issues. They can also be used by [Email stages](flow/stages/email/index.md) to send verification/recovery emails.
```yaml
###################################
2020-12-05 21:08:42 +00:00
# Values directly affecting authentik
###################################
image:
2020-12-05 21:08:42 +00:00
name: beryju/authentik
name_static: beryju/authentik-static
name_outposts: beryju/authentik # Prefix used for Outpost deployments, Outpost type and version is appended
2021-01-17 21:36:16 +00:00
tag: 2021.1.1-stable
serverReplicas: 1
workerReplicas: 1
2020-12-05 21:08:42 +00:00
# Enable the Kubernetes integration which lets authentik deploy outposts into kubernetes
kubernetesIntegration: true
config:
# Optionally specify fixed secret_key, otherwise generated automatically
# secretKey: _k*@6h2u2@q-dku57hhgzb7tnx*ba9wodcb^s9g0j59@=y(@_o
# Enable error reporting
errorReporting:
enabled: false
environment: customer
sendPii: false
# Log level used by web and worker
# Can be either debug, info, warning, error
logLevel: warning
# Global Email settings
email:
# SMTP Host Emails are sent to
host: localhost
port: 25
# Optionally authenticate
username: ""
password: ""
# Use StartTLS
useTls: false
# Use SSL
useSsl: false
timeout: 10
# Email address authentik will send from, should have a correct @domain
from: authentik@localhost
# Enable Database Backups to S3
# backup:
# accessKey: access-key
# secretKey: secret-key
# bucket: s3-bucket
# region: eu-central-1
# host: s3-host
ingress:
annotations:
{}
# kubernetes.io/ingress.class: nginx
# kubernetes.io/tls-acme: "true"
hosts:
2020-12-05 21:08:42 +00:00
- authentik.k8s.local
tls: []
# - secretName: chart-example-tls
# hosts:
2020-12-05 21:08:42 +00:00
# - authentik.k8s.local
###################################
# Values controlling dependencies
###################################
install:
postgresql: true
redis: true
2020-12-05 21:08:42 +00:00
# These values influence the bundled postgresql and redis charts, but are also used by authentik to connect
postgresql:
2020-12-05 21:08:42 +00:00
postgresqlDatabase: authentik
redis:
cluster:
enabled: false
master:
persistence:
enabled: false
```