Tana M Berry
3fd278e16d
* new first steps docs * moved email config up to match Docker * first draft * moved sections and retitled some * more content, tweaks * dewis edits * added Dewi ideas, more content, tweaks * more content, green tips, other fixes * Optimised images with calibre/image-actions * Optimised images with calibre/image-actions * Optimised images with calibre/image-actions * conflicts? * dominic's eedits, more content * another fine Dominic edit * more dewi and dominic edits, links * a bunch of things Signed-off-by: Jens Langhammer <jens@goauthentik.io> * tweaks * thanks Teffen * new styles, more content * few more dominic edits, tweaks * formatting fights on tips * fix some alignments Signed-off-by: Jens Langhammer <jens@goauthentik.io> * changes from Jens * work on bindings docs that was needed for the first steps docs * links, more tweaks * more edits, more TODOs done * add mermaid diagram, more links, more content * fix sidebar, tweaks * tweak * more link fixing * fix heading size * more dewi and dominic edits * more dewi and dominic edits * teffen enhancements yay and more bindings rearchitecting * added note about stage bindings being the only type of binding that you can bind to yeehaw --------- Signed-off-by: Tana M Berry <tanamarieberry@yahoo.com> Signed-off-by: Jens Langhammer <jens@goauthentik.io> Co-authored-by: authentik-automation[bot] <135050075+authentik-automation[bot]@users.noreply.github.com> Co-authored-by: Dewi Roberts <dewi@goauthentik.io> Co-authored-by: Jens Langhammer <jens@goauthentik.io>
3.5 KiB
title
| title |
|---|
| Kubernetes installation |
You can install authentik to run on Kubernetes using a Helm Chart.
:::info You can also view a video walk-through of the installation process on Kubernetes (with bonus details about email configuration and other important options). :::
Requirements
- Kubernetes
- Helm
Video
View our video about installing authentik on Kubernetes.
Generate passwords
Start by generating passwords for the database and cache. You can use either of the following commands:
pwgen -s 50 1
openssl rand 60 | base64 -w 0
Set values
Create a values.yaml file with a minimum of these settings:
authentik:
secret_key: "PleaseGenerateASecureKey"
# This sends anonymous usage-data, stack traces on errors and
# performance data to sentry.io, and is fully opt-in
error_reporting:
enabled: true
postgresql:
password: "ThisIsNotASecurePassword"
server:
gateway:
# Specify kubernetes gateway controller class name
GatewayClassName: nginx | traefik | kong
enabled: true
hosts:
- authentik.domain.tld
postgresql:
enabled: true
auth:
password: "ThisIsNotASecurePassword"
See all configurable values on ArtifactHub.
PostgreSQL production setup
The PostgreSQL database that is created by default during installation is only intended for demonstration and testing purposes. For production instances, you should use another installation method using one of the following operators:
Email configuration (optional but recommended)
It is also recommended to configure global email settings. These are used by authentik to notify administrators about alerts, configuration issues and new releases. They can also be used by Email stages to send verification/recovery emails.
For more information, refer to our Email configuration documentation.
Install authentik Helm Chart
Now, execute the following commands to install authentik:
helm repo add authentik https://charts.goauthentik.io
helm repo update
helm upgrade --install authentik authentik/authentik -f values.yaml
During the installation process, the database migrations will be applied automatically on startup.
Access authentik
After the installation is complete, access authentik at https://<gateway-host-name>/if/flow/initial-setup/. Here, you can set a password for the default akadmin user.
:::info Initial setup in browser
You will get a Not Found error if initial setup URL doesn't include the trailing forward slash /. Also verify that the authentik server, worker, and PostgreSQL database are running and healthy. Review additional tips in our troubleshooting docs.
:::
First steps in authentik
import BlurbFirstSteps from "../first-steps/_blurb_first_steps.mdx";