authelia helm

Authelia is an open-source authentication and authorization server and portal fulfilling the identity and access management (IAM) role of information security in providing multi-factor authentication and single sign-on (SSO) for your applications via a web portal. It acts as a companion for common reverse proxies.

Install

Install with:

helm repo add bjw-s https://bjw-s.github.io/helm-charts/
helm install authelia bjw-s/app-template -f values.yaml

Top Repositories (5 out of 19)

See examples from other people.

NameRepoStarsVersionTimestamp
autheliaharaldkoch/kochhaus-home341.3.22 hours ago
autheliaonedr0p/home-ops10561.3.22 hours ago
autheliabrettinternet/homelab821.3.29 days ago
autheliacarpenike/k8s-gitops1431.3.211 days ago
autheliatruxnell/home-cluster991.3.219 days ago

Values

See the most popular values for this chart:

KeyTypes
image.repository (19)
ghcr.io/authelia/authelia
string
image.tag (19)
4.37.5
string
controller.strategy (18)
RollingUpdate
string
controller.replicas (17)
3
number
controller.annotations."reloader.stakater.com/auto" (11)
true
string
controller.rollingUpdate.surge (4)
1
number
controller.rollingUpdate.unavailable (1)
number
enableServiceLinks (18)
false
boolean
envFrom[].secretRef.name (18)
authelia-secret
string
service.main.ports.http.port (18)
80
number
service.main.ports.http.enabled (1)
boolean
service.main.ports.http.primary (1)
boolean
service.main.ports.metrics.enabled (16)
true
boolean
service.main.ports.metrics.port (16)
8080
number
service.main.ports.redis.enabled (1)
boolean
service.main.ports.redis.port (1)
number
service.main.ports.redis.primary (1)
boolean
service.main.ipFamilyPolicy (1)
string
service.main.monitor.enabled (1)
boolean
service.main.monitor.endpoints[].interval (1)
string
service.main.monitor.endpoints[].path (1)
string
service.main.monitor.endpoints[].port (1)
string
service.main.monitor.endpoints[].scheme (1)
string
service.main.monitor.endpoints[].scrapeTimeout (1)
string
ingress.main.enabled (17)
true
boolean
ingress.main.hosts[].host (17)
auth.${SECRET_DOMAIN}
string
ingress.main.hosts[].paths[].path (17)
/
string
ingress.main.hosts[].paths[].pathType (17)
Prefix
string
ingress.main.ingressClassName (17)
nginx
string
ingress.main.tls[].hosts[] (17)
- auth.${SECRET_DOMAIN}
string
ingress.main.tls[].secretName (2)
string
ingress.main.annotations."nginx.ingress.kubernetes.io/configuration-snippet" (15)
add_header Cache-Control "no-store"; add_header Pragma "no-cache"; add_header X-Frame-Options "SAMEORIGIN"; add_header X-XSS-Protection "1; mode=block";
string
ingress.main.annotations."external-dns.home.arpa/enabled" (10)
true
string
ingress.main.annotations."hajimari.io/icon" (6)
mdi:shield-account
string
ingress.main.annotations."hajimari.io/enable" (3)
string
ingress.main.annotations."external-dns.alpha.kubernetes.io/target" (2)
string
ingress.main.annotations."hajimari.io/appName" (2)
string
ingress.main.annotations."cert-manager.io/cluster-issuer" (1)
string
ingress.main.annotations."hajimari.io/group" (1)
string
ingress.main.annotations."nginx.ingress.kubernetes.io/enable-cors" (1)
string
persistence.config.enabled (17)
true
boolean
persistence.config.mountPath (17)
/config/configuration.yml
string
persistence.config.name (17)
authelia-configmap
string
persistence.config.readOnly (17)
false
boolean
persistence.config.subPath (17)
configuration.yml
string
persistence.config.type (17)
configMap
string
persistence.accessMode (1)
string
persistence.data.enabled (1)
boolean
persistence.data.existingClaim (1)
string
persistence.data.path (1)
string
persistence.data.subPath (1)
string
persistence.enabled (1)
boolean
persistence.existingClaim (1)
string
persistence.name (1)
string
persistence.path (1)
string
resources.limits.memory (16)
100Mi
string
resources.requests.cpu (16)
5m
string
resources.requests.memory (16)
10Mi
string
podSecurityContext.fsGroup (15)
568
number
podSecurityContext.fsGroupChangePolicy (15)
OnRootMismatch
string
podSecurityContext.runAsGroup (15)
568
number
podSecurityContext.runAsUser (15)
568
number
topologySpreadConstraints[].labelSelector.matchLabels."app.kubernetes.io/name" (15)
authelia
string
topologySpreadConstraints[].maxSkew (15)
1
number
topologySpreadConstraints[].topologyKey (15)
kubernetes.io/hostname
string
topologySpreadConstraints[].whenUnsatisfiable (15)
DoNotSchedule
string
podAnnotations."secret.reloader.stakater.com/reload" (9)
authelia
string
podAnnotations."configmap.reloader.stakater.com/reload" (7)
authelia
string
serviceMonitor.main.enabled (7)
true
boolean
serviceMonitor.main.endpoints[].interval (7)
1m
string
serviceMonitor.main.endpoints[].path (7)
/metrics
string
serviceMonitor.main.endpoints[].port (7)
metrics
string
serviceMonitor.main.endpoints[].scheme (7)
http
string
serviceMonitor.main.endpoints[].scrapeTimeout (7)
10s
string
args[] (6)
- --config
- /config/configuration.yml
- --config.experimental.filters
- expand-env
string
initContainers.init-db.envFrom[].secretRef.name (6)
authelia-secret
string
initContainers.init-db.image (6)
ghcr.io/onedr0p/postgres-initdb:14.7
string
initContainers.init-db.imagePullPolicy (4)
IfNotPresent
string
initContainers.01-init-db.envFrom[].secretRef.name (2)
string
initContainers.01-init-db.image (2)
string
initContainers.01-init-db.imagePullPolicy (2)
string
probes.liveness.custom (6)
true
boolean
probes.liveness.enabled (6)
true
boolean
probes.liveness.spec.failureThreshold (6)
3
number
probes.liveness.spec.httpGet.path (6)
/api/health
string
probes.liveness.spec.httpGet.port (6)
80
number
probes.liveness.spec.initialDelaySeconds (6)
0
number
probes.liveness.spec.periodSeconds (6)
10
number
probes.liveness.spec.timeoutSeconds (6)
1
number
probes.readiness.custom (6)
true
boolean
probes.readiness.enabled (6)
true
boolean
probes.readiness.spec.failureThreshold (6)
3
number
probes.readiness.spec.httpGet.path (6)
/api/health
string
probes.readiness.spec.httpGet.port (6)
80
number
probes.readiness.spec.initialDelaySeconds (6)
0
number
probes.readiness.spec.periodSeconds (6)
10
number
probes.readiness.spec.timeoutSeconds (6)
1
number
probes.startup.enabled (6)
false
boolean
command[] (1)
string
env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_ADDITIONAL_USERS_DN (1)
string
env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_BASE_DN (1)
string
env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_DISPLAY_NAME_ATTRIBUTE (1)
string
env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_GROUP_NAME_ATTRIBUTE (1)
string
env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_GROUPS_FILTER (1)
string
env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_MAIL_ATTRIBUTE (1)
string
env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_URL (1)
string
env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_USER (1)
string
env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_USERNAME_ATTRIBUTE (1)
string
env.AUTHELIA_AUTHENTICATION_BACKEND_LDAP_USERS_FILTER (1)
string
env.AUTHELIA_AUTHENTICATION_BACKEND_PASSWORD_RESET_DISABLE (1)
string
env.AUTHELIA_DUO_API_DISABLE (1)
string
env.AUTHELIA_LOG_LEVEL (1)
string
env.AUTHELIA_NOTIFIER_SMTP_DISABLE_REQUIRE_TLS (1)
string
env.AUTHELIA_NOTIFIER_SMTP_HOST (1)
string
env.AUTHELIA_NOTIFIER_SMTP_PORT (1)
number
env.AUTHELIA_SERVER_DISABLE_HEALTHCHECK (1)
string
env.AUTHELIA_SERVER_PORT (1)
number
env.AUTHELIA_TELEMETRY_METRICS_ADDRESS (1)
string
env.AUTHELIA_TELEMETRY_METRICS_ENABLED (1)
string
env.AUTHELIA_THEME (1)
string
env.AUTHELIA_TOTP_ISSUER (1)
string
env.AUTHELIA_WEBAUTHN_DISABLE (1)
string
env.REDIS_REPLICATION_MODE (1)
string
global.nameOverride (1)
string
securityContext.allowPrivilegeEscalation (1)
boolean
securityContext.capabilities.add[] (1)
string
securityContext.privileged (1)
boolean
tolerations[].effect (1)
string
tolerations[].operator (1)
string
volumeClaimTemplates[].accessMode (1)
string
volumeClaimTemplates[].mountPath (1)
string
volumeClaimTemplates[].name (1)
string
volumeClaimTemplates[].size (1)
string
volumeClaimTemplates[].storageClass (1)
string