Authentik - Installation - Docker (Compose) | Kubernetes (Helm)

Подписаться 2,5 тыс.

Просмотров 4,4 тыс.

50% 1

Authentik - Application(s) Setup: • Authentik - Applicatio...
This video demonstrates installing Authentik via Docker (Compose) as well as Kubernetes/K8s (Helm). The Linux Distro used in the video is Ubuntu Server 22.04.3 LTS accessed via PuTTY's SSH terminal client.
This video was made in collaboration with: Authentik Security Inc.
Preparation and installation of Docker/Compose: 0:23
Docker Compose installation of authentik: 4:32
Preparation and installation of Kubernetes and Helm: 9:30
Kubernetes/Helm installation of authentik: 14:12
Resources:
Authentik's Documentation (Docker Compose):goauthentik.io/docs/installat...
Authentik's Documentation (Kubernetes Helm): goauthentik.io/docs/installat...
kURL Open Source Kubernetes Installer: kurl.sh/
Installing Helm: helm.sh/docs/intro/install/
Kubernetes (kubectl Install Tools): kubernetes.io/docs/tasks/tools/
Kubernetes (kubectl commands cheat sheet): kubernetes.io/docs/reference/...
Contents of LoadBalancer config used in the video:
apiVersion: v1
kind: Service
metadata:
name: authentik-service
spec:
selector:
app: authentik
ports:
- name: http
protocol: TCP
port: 9000 #change as required
targetPort: 9000
- name: https
protocol: TCP
port: 9443 #change as required
targetPort: 9443
type: LoadBalancer

Хобби

Опубликовано:

26 ноя 2023

Ссылка:

Скачать:

Готовим ссылку...

Добавить в:

Мой плейлист

Посмотреть позже

Комментарии : 15

@Darcon85 Месяц назад

Great tutorial, especially kubernetes part. What would be great is to add section how to add SSL cert. Been struggling with that and finally gave up using IP address to access Authentic

@dbishop9085 7 месяцев назад

Excellent video. Thank you for all these tutorials! Authentik is a beast of a service and every little bit helps. I was wondering if you have any videos, or plans to make a video, on setting authentik up to use with more than one domain? I have about 4 i would like to use but dont see a way to do this. All of my efforts have failed miserably so far.

@dimaj1 8 месяцев назад

another great video! if I may, couple of comments: * minikube _could_ be run in a multi-node configuration. You would simply do: "minikube start -n " * when you were adding your labels, it is best to deploy authentik with the label already baked in. Just update your 'values.yaml' file by adding something under "deployment.labels" section.. Unfortunately, I do not know how to share links in comments (my comments with links always get deleted), otherwise I would link you straight to the field to be updated from their helm chart repository

@cooptonian 8 месяцев назад

Thanks! And good to know! That sucks you can't share the link, that would definitely be helpful. Maybe space it out or truncate the http part so it won't be read as a link. Could help others.

@dimaj1 8 месяцев назад

@@cooptonian yeah... even spaced out, it doesn't work 😠

@cooptonian 8 месяцев назад

bummer, just checked to make sure it wasn't something on my end...I guess RU-vid blocks links in comments. I read up that sometimes these are held for review for the creator...but I see nothing in my held for review section.

@dimaj1 8 месяцев назад

wow... youtube really hates me... i just wrote up how to get to the helm chart and message got deleted again 😂 is there a way i can contact you via youtube somehow to give you those links?

@cooptonian 8 месяцев назад

Thanks for the info!

@olsenlid 8 месяцев назад

Just found your channel, searching for a way to integrate Duo Push to my authentication flow in authentik. Going to watch that video again now, and try to set it up. Thanks for the content :)

@cooptonian 8 месяцев назад

You're welcome! For that video regarding DUO, note my pinned comment as the steps with API browser are no longer needed. And it's been awhile so there may be even more changes...but hopefully the video gets you through most, if not all, of it.

@olsenlid 8 месяцев назад

@@cooptonian I'll report back if I stumble upon any changes that breaks the demonstration. Thanks!

@Phonkd-rp6po 6 месяцев назад

If I were to label my pod, the pod would be overwritten by argocd. So i would need to lable the pod via helm chart but see no such option. Any idea?

@Phonkd-rp6po 6 месяцев назад

I figured it out, i can just add labels via argo pod under manifest

@jimmy5846 8 месяцев назад

This setup assumes no docker knowledge and prevents integrating with setups that are already using docker. Quick rule of thumb; don't use a script to pull a docker compose file. It's much more difficult to understand what's happening and how I can modify it for my system. I like to separate my containers into stacks in portainer based on their general function, so I would like to have the postgresql and redis containers in a separate stack. Because the environment points to the container name, I am unable to deploy the server and client. As a side note, naming the containers 'server' and 'client' makes it difficult to understand what these containers do if I have many containers. I have the general knowledge to make that change before running the stack, however if these are the first 2 containers I'm creating in my system then I'm going to find myself questioning what they are 2-3 months down the line after adding more services.

@jimmy5846 8 месяцев назад

The fix for this is to use external networks. ``` networks: someOtherStack_default: external: true services: server: . . . networks: - someOtherStack_default . . . ```