2026-07-22 11:17:22 -07:00
|
|
|
# Homarr landing page with Authentik SSO
|
2026-08-18 15:08:03 -07:00
|
|
|
# Probes patched via PostSync hook (chart doesn't support customization)
|
2026-08-18 15:08:03 -07:00
|
|
|
|
2026-07-22 08:59:51 -07:00
|
|
|
image:
|
|
|
|
|
repository: ghcr.io/homarr-labs/homarr
|
2026-08-18 15:08:03 -07:00
|
|
|
tag: "latest"
|
|
|
|
|
pullPolicy: Always
|
2026-07-22 08:59:51 -07:00
|
|
|
|
|
|
|
|
replicaCount: 1
|
|
|
|
|
|
2026-07-22 11:17:22 -07:00
|
|
|
# Configure SSO via environment variables
|
|
|
|
|
# Chart supports these via top-level env dict (not array)
|
|
|
|
|
env:
|
|
|
|
|
AUTH_PROVIDERS: "oidc,credentials"
|
|
|
|
|
AUTH_OIDC_ISSUER: "https://authentik.riotpiao.com/application/o/homarr/"
|
|
|
|
|
AUTH_OIDC_CLIENT_NAME: "Authentik"
|
|
|
|
|
AUTH_OIDC_GROUPS_ATTRIBUTE: "groups"
|
|
|
|
|
AUTH_OIDC_SCOPE_OVERWRITE: "openid email profile groups"
|
|
|
|
|
AUTH_OIDC_AUTO_LOGIN: "false"
|
|
|
|
|
BASE_URL: "https://homarr.riotpiao.com"
|
|
|
|
|
NEXTAUTH_URL: "https://homarr.riotpiao.com"
|
|
|
|
|
|
|
|
|
|
# Client credentials from homarr-oidc secret
|
|
|
|
|
# Chart doesn't support envFrom, so we add via extraEnv
|
|
|
|
|
extraEnv:
|
|
|
|
|
- name: AUTH_OIDC_CLIENT_ID
|
|
|
|
|
valueFrom:
|
|
|
|
|
secretKeyRef:
|
|
|
|
|
name: homarr-oidc
|
|
|
|
|
key: client-id
|
|
|
|
|
- name: AUTH_OIDC_CLIENT_SECRET
|
|
|
|
|
valueFrom:
|
|
|
|
|
secretKeyRef:
|
|
|
|
|
name: homarr-oidc
|
|
|
|
|
key: client-secret
|
|
|
|
|
|
2026-07-22 08:59:51 -07:00
|
|
|
tolerations:
|
|
|
|
|
- key: node-role.kubernetes.io/control-plane
|
|
|
|
|
operator: Exists
|
|
|
|
|
effect: NoSchedule
|
|
|
|
|
|
|
|
|
|
resources:
|
|
|
|
|
requests:
|
|
|
|
|
cpu: 100m
|
|
|
|
|
memory: 256Mi
|
|
|
|
|
limits:
|
|
|
|
|
cpu: 500m
|
|
|
|
|
memory: 512Mi
|
