authentik logo

--- [![](https://img.shields.io/discord/809154715984199690?label=Discord&style=for-the-badge)](https://goauthentik.io/discord) ![Version: 2.1.0](https://img.shields.io/badge/Version-2.1.0-informational?style=for-the-badge) ![AppVersion: 2025.4.0](https://img.shields.io/badge/AppVersion-2025.4.0-informational?style=for-the-badge) RBAC required for a remote cluster to be connected to authentik. **Homepage:** ## Maintainers | Name | Email | Url | | ---- | ------ | --- | | authentik Team | | | ## Source Code * * ## Values | Key | Type | Default | Description | |-----|------|---------|-------------| | annotations | object | `{}` | Annotations to apply to all resources | | clusterRole.enabled | bool | `true` | Create a clusterole in addition to a namespaced role. | | fullnameOverride | string | `""` | String to fully override `"authentik.fullname"`. Prefer using global.fullnameOverride if possible | | global.additionalLabels | object | `{}` | Common labels for all resources. | | global.fullnameOverride | string | `""` | String to fully override `"authentik.fullname"` | | global.nameOverride | string | `""` | Provide a name in place of `authentik` | | global.namespaceOverride | string | `""` | A custom namespace to override the default namespace for the deployed resources. | | kubeVersionOverride | string | `""` | Override the Kubernetes version, which is used to evaluate certain manifests | | nameOverride | string | `""` | Provide a name in place of `authentik`. Prefer using global.nameOverride if possible | | serviceAccountSecret.enabled | bool | `true` | Create a secret with the service account credentials |