diff --git a/website/docs/install-config/install/kubernetes.md b/website/docs/install-config/install/kubernetes.md index c64b0a30b0..1427a847e8 100644 --- a/website/docs/install-config/install/kubernetes.md +++ b/website/docs/install-config/install/kubernetes.md @@ -43,9 +43,9 @@ authentik: password: "ThisIsNotASecurePassword" server: - gateway: - # Specify kubernetes gateway controller class name - GatewayClassName: nginx | traefik | kong + ingress: + # Specify kubernetes ingress controller class name + ingressClassName: nginx | traefik | kong enabled: true hosts: - authentik.domain.tld @@ -56,6 +56,24 @@ postgresql: password: "ThisIsNotASecurePassword" ``` +If your cluster or controller supports the Gateway API, replace the `server.ingress` section above with this Gateway API configuration: + +```yaml +server: + route: + main: + enabled: true + hostnames: + - authentik.domain.tld + parentRefs: + - name: shared-gateway + namespace: default +``` + +The Helm chart creates an `HTTPRoute`, but it does not create `Gateway` or `GatewayClass` resources. Create the `Gateway` separately, then set `server.route.main.parentRefs` to that `Gateway` resource's name and namespace. In the example above, `name: shared-gateway` and `namespace: default` must match the manually created `Gateway`. + +If your cluster or controller does not support the Gateway API, use the `server.ingress` configuration shown above. + See all configurable values on [ArtifactHub](https://artifacthub.io/packages/helm/goauthentik/authentik). ## PostgreSQL production setup @@ -85,7 +103,7 @@ During the installation process, the database migrations will be applied automat ## Access authentik -After the installation is complete, access authentik at `https:///if/flow/initial-setup/`. Here, you can set a password for the default `akadmin` user. +After the installation is complete, access authentik at `https:///if/flow/initial-setup/`. Here, you can set a password for the default `akadmin` user. :::info Initial setup in browser You will get a `Not Found` error if initial setup URL doesn't include the trailing forward slash `/`. Also verify that the authentik server, worker, and PostgreSQL database are running and healthy. Review additional tips in our [troubleshooting docs](../../troubleshooting/login.md#cant-access-initial-setup-flow-during-installation-steps).