authentik/website/docs/installation/kubernetes.md

---
title: Kubernetes installation
---

For a mid to high-load installation, Kubernetes is recommended. passbook is installed using a helm-chart.

This installation automatically applies database migrations on startup. After the installation is done, you can use `pbadmin` as username and password.

```yaml
###################################
# Values directly affecting passbook
###################################
image:
    name: beryju/passbook
    name_static: beryju/passbook-static
    tag: 0.12.11-stable

serverReplicas: 1
workerReplicas: 1

# Enable the Kubernetes integration which lets passbook deploy outposts into kubernetes
kubernetesIntegration: true

config:
    # Optionally specify fixed secret_key, otherwise generated automatically
    # secretKey: _k*@6h2u2@q-dku57hhgzb7tnx*ba9wodcb^s9g0j59@=y(@_o
    # Enable error reporting
    errorReporting:
        enabled: false
        environment: customer
        sendPii: false
    # Log level used by web and worker
    # Can be either debug, info, warning, error
    logLevel: warning

# Enable Database Backups to S3
# backup:
#   accessKey: access-key
#   secretKey: secret-key
#   bucket: s3-bucket
#   region: eu-central-1
#   host: s3-host

ingress:
    annotations:
        {}
        # kubernetes.io/ingress.class: nginx
        # kubernetes.io/tls-acme: "true"
    hosts:
        - passbook.k8s.local
    tls: []
    #  - secretName: chart-example-tls
    #    hosts:
    #      - passbook.k8s.local

###################################
# Values controlling dependencies
###################################

install:
    postgresql: true
    redis: true

# These values influence the bundled postgresql and redis charts, but are also used by passbook to connect
postgresql:
    postgresqlDatabase: passbook

redis:
    cluster:
        enabled: false
    master:
        persistence:
            enabled: false
        # https://stackoverflow.com/a/59189742
        disableCommands: []
```