2020-08-25 16:02:51 +00:00
|
|
|
###################################
|
2020-12-05 21:08:42 +00:00
|
|
|
# Values directly affecting authentik
|
2020-08-25 16:02:51 +00:00
|
|
|
###################################
|
2019-02-08 13:57:16 +00:00
|
|
|
image:
|
2020-12-05 21:08:42 +00:00
|
|
|
name: beryju/authentik
|
|
|
|
name_static: beryju/authentik-static
|
2021-04-29 18:07:53 +00:00
|
|
|
# Image used for managed outposts. Placeholders:
|
|
|
|
# %(type)s: Outpost type; proxy, ldap, etc
|
|
|
|
# %(version)s: Current version; 2021.4.1
|
|
|
|
name_outposts: "beryju/authentik-%(type)s:%(version)s"
|
2021-04-24 19:03:29 +00:00
|
|
|
tag: 2021.4.4
|
2020-12-12 22:07:13 +00:00
|
|
|
pullPolicy: IfNotPresent
|
2019-02-08 13:57:16 +00:00
|
|
|
|
2020-09-09 16:21:27 +00:00
|
|
|
serverReplicas: 1
|
|
|
|
workerReplicas: 1
|
|
|
|
|
2020-12-05 21:08:42 +00:00
|
|
|
# Enable the Kubernetes integration which lets authentik deploy outposts into kubernetes
|
2020-10-16 19:36:12 +00:00
|
|
|
kubernetesIntegration: true
|
|
|
|
|
2021-03-08 12:02:02 +00:00
|
|
|
monitoring:
|
2021-04-16 07:20:13 +00:00
|
|
|
enabled: false
|
2021-03-08 12:02:02 +00:00
|
|
|
|
2021-04-16 10:31:55 +00:00
|
|
|
pvc:
|
|
|
|
mode: ReadWriteMany
|
|
|
|
uploadsSize: 5Gi
|
|
|
|
uploadsStorageClass: null
|
|
|
|
geoIpSize: 1Gi
|
|
|
|
geoIpStorageClass: null
|
|
|
|
|
2019-02-08 13:57:16 +00:00
|
|
|
config:
|
|
|
|
# Optionally specify fixed secret_key, otherwise generated automatically
|
2020-10-16 19:36:12 +00:00
|
|
|
# secretKey: _k*@6h2u2@q-dku57hhgzb7tnx*ba9wodcb^s9g0j59@=y(@_o
|
2019-02-08 13:57:16 +00:00
|
|
|
# Enable error reporting
|
2020-10-16 19:36:12 +00:00
|
|
|
errorReporting:
|
2020-08-20 18:39:21 +00:00
|
|
|
enabled: false
|
|
|
|
environment: customer
|
2020-10-16 19:36:12 +00:00
|
|
|
sendPii: false
|
2020-05-20 10:16:56 +00:00
|
|
|
# Log level used by web and worker
|
|
|
|
# Can be either debug, info, warning, error
|
2020-10-16 19:36:12 +00:00
|
|
|
logLevel: warning
|
2021-01-04 23:41:10 +00:00
|
|
|
# Global Email settings
|
|
|
|
email:
|
|
|
|
# SMTP Host Emails are sent to
|
|
|
|
host: localhost
|
|
|
|
port: 25
|
|
|
|
# Optionally authenticate
|
|
|
|
username: ""
|
|
|
|
password: ""
|
|
|
|
# Use StartTLS
|
|
|
|
useTls: false
|
|
|
|
# Use SSL
|
|
|
|
useSsl: false
|
|
|
|
timeout: 10
|
|
|
|
# Email address authentik will send from, should have a correct @domain
|
|
|
|
from: authentik@localhost
|
2019-02-08 13:57:16 +00:00
|
|
|
|
2021-03-11 16:32:16 +00:00
|
|
|
# Enable MaxMind GeoIP
|
|
|
|
geoip:
|
|
|
|
enabled: false
|
|
|
|
accountId: ""
|
|
|
|
licenseKey: ""
|
|
|
|
image: maxmindinc/geoipupdate:latest
|
|
|
|
|
2020-05-16 12:17:43 +00:00
|
|
|
# Enable Database Backups to S3
|
|
|
|
# backup:
|
2020-10-19 12:30:44 +00:00
|
|
|
# accessKey: access-key
|
|
|
|
# secretKey: secret-key
|
2020-05-16 12:17:43 +00:00
|
|
|
# bucket: s3-bucket
|
2020-10-03 18:36:36 +00:00
|
|
|
# region: eu-central-1
|
2020-05-16 12:17:43 +00:00
|
|
|
# host: s3-host
|
|
|
|
|
2020-10-03 18:36:36 +00:00
|
|
|
ingress:
|
|
|
|
annotations: {}
|
|
|
|
# kubernetes.io/ingress.class: nginx
|
|
|
|
# kubernetes.io/tls-acme: "true"
|
|
|
|
hosts:
|
2020-12-05 21:08:42 +00:00
|
|
|
- authentik.k8s.local
|
2020-10-03 18:36:36 +00:00
|
|
|
tls: []
|
|
|
|
# - secretName: chart-example-tls
|
|
|
|
# hosts:
|
2020-12-05 21:08:42 +00:00
|
|
|
# - authentik.k8s.local
|
2020-10-03 18:36:36 +00:00
|
|
|
|
2020-08-25 16:02:51 +00:00
|
|
|
###################################
|
|
|
|
# Values controlling dependencies
|
|
|
|
###################################
|
|
|
|
|
|
|
|
install:
|
|
|
|
postgresql: true
|
|
|
|
redis: true
|
2019-11-08 12:49:28 +00:00
|
|
|
|
2020-12-05 21:08:42 +00:00
|
|
|
# These values influence the bundled postgresql and redis charts, but are also used by authentik to connect
|
2019-11-08 12:49:28 +00:00
|
|
|
postgresql:
|
2020-12-05 21:08:42 +00:00
|
|
|
postgresqlDatabase: authentik
|
2020-10-23 18:45:21 +00:00
|
|
|
|
|
|
|
redis:
|
|
|
|
cluster:
|
|
|
|
enabled: false
|
|
|
|
master:
|
|
|
|
# https://stackoverflow.com/a/59189742
|
|
|
|
disableCommands: []
|