2020-11-15 21:42:02 +00:00
---
title: Kubernetes installation
---
2023-07-31 20:17:54 +00:00
You can install authentik to run on Kubernetes using Helm Chart.
2020-11-15 21:42:02 +00:00
2023-07-31 20:17:54 +00:00
### Requirements
2021-04-17 09:06:21 +00:00
2023-07-31 20:17:54 +00:00
- Kubernetes
- Helm
### Generate Passwords
Start by generating passwords for the database and cache. You can use either of the following commands:
```
pwgen -s 50 1
openssl rand -base64 36
```
### Set Values
Create a `values.yaml` file with a minimum of these settings:
2021-04-17 09:06:21 +00:00
```yaml
2021-05-21 17:02:05 +00:00
authentik:
2022-05-09 19:22:41 +00:00
secret_key: "PleaseGenerateA50CharKey"
# This sends anonymous usage-data, stack traces on errors and
2023-07-31 20:17:54 +00:00
# Performance data to sentry.io, and is fully opt-in
2022-05-09 19:22:41 +00:00
error_reporting:
enabled: true
postgresql:
password: "ThisIsNotASecurePassword"
2021-05-21 17:02:05 +00:00
ingress:
2023-07-31 20:17:54 +00:00
# Specify kubernetes ingress controller class name
ingressClassName: nginx | traefik | kong
2022-05-09 19:22:41 +00:00
enabled: true
hosts:
2023-07-31 20:17:54 +00:00
# Specify external host name
2022-05-09 19:22:41 +00:00
- host: authentik.domain.tld
paths:
- path: "/"
pathType: Prefix
2021-05-21 17:02:05 +00:00
2021-04-17 09:06:21 +00:00
postgresql:
2022-05-09 19:22:41 +00:00
enabled: true
postgresqlPassword: "ThisIsNotASecurePassword"
2021-04-17 09:06:21 +00:00
redis:
2022-05-09 19:22:41 +00:00
enabled: true
2021-04-17 09:06:21 +00:00
```
2021-05-08 14:25:11 +00:00
See all configurable values on [artifacthub ](https://artifacthub.io/packages/helm/goauthentik/authentik ).
2023-07-31 20:17:54 +00:00
### Install authentik Helm Chart
Now, execute the following commands to install authentik
2020-11-23 19:50:19 +00:00
```
2021-05-09 15:32:14 +00:00
helm repo add authentik https://charts.goauthentik.io
2020-11-23 19:50:19 +00:00
helm repo update
2022-02-04 21:36:34 +00:00
helm upgrade --install authentik authentik/authentik -f values.yaml
2020-11-23 19:50:19 +00:00
```
2023-07-31 20:17:54 +00:00
During the installation process, the database migrations will be applied automatically on startup.
### Accessing authentik
Once the installation is complete, access authentik at `https://<ingress-host-name>/if/flow/initial-setup/` . Here, you can set a password for the akadmin user.
### Optional Step: Configure Global Email Credentials
It is recommended to configure global email credentials as well. These are used by authentik to notify you about alerts and configuration issues. Additionally, they can be utilized by Email stages to send verification and recovery emails.
2020-11-15 21:42:02 +00:00
2023-07-31 20:17:54 +00:00
By following these steps, you will successfully install and set up authentik on Kubernetes using Helm.