skills.rest
kettleofketchup
kettleofketchupCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

authentik

Deploy and manage Authentik identity provider on Kubernetes clusters.

Updated Apr 3, 2026
Search Tags:#kubernetes#helm#sso#oauth2#saml#authentik#identity-provider
One-click install
npx skills add https://github.com/kettleofketchup/KettleOfSkills --skill authentik-kettleofketchup
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: authentik
Source: https://github.com/kettleofketchup/KettleOfSkills/tree/main/plugins/authentik/skills/authentik
Command: npx skills add https://github.com/kettleofketchup/KettleOfSkills --skill authentik-kettleofketchup

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill eliminates the complexity of manually deploying, configuring, and managing a self-hosted Authentik identity provider on Kubernetes, reducing setup time and preventing configuration errors for SSO, identity federation, and access control workflows.

Core Features & Use Cases

  • Production-Ready Kubernetes Deployment: Deploy Authentik via Helm with pre-configured values for Traefik, PostgreSQL, and Redis, including ArgoCD GitOps integration patterns.
  • SSO Provider Configuration: Set up SAML, OAuth2/OIDC, and LDAP federation sources for common tools like ArgoCD, Grafana, Gitea, and Google Workspace.
  • Declarative Configuration Management: Use Authentik blueprints to automate flows, branding, application access policies, and LDAP source setup with built-in drift reconciliation.
  • Use Case: For a homelab or enterprise Kubernetes cluster, use this Skill to quickly stand up a self-hosted IdP, configure SSO for internal tools, apply custom multi-domain branding, and set up forward auth for Traefik without manual UI tweaking.

Quick Start

Use the authentik skill to deploy Authentik to your Kubernetes cluster via Helm with the provided production values, then configure a SAML provider for ArgoCD SSO using the included integration guide.

Frequently Asked Questions about authentik

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I deploy a self-hosted identity provider on Kubernetes for SSO?▼

Deploy a self-hosted identity provider on Kubernetes by using Helm to install Authentik with pre-configured values for PostgreSQL and Redis. This provides production-ready SSO and access control without manual UI configuration.

Can I configure SAML and OAuth2 SSO for tools like ArgoCD and Grafana on Kubernetes?▼

Yes, you can configure SAML and OAuth2/OIDC SSO for tools like ArgoCD, Grafana, and Gitea. The deployment includes pre-built SSO configurations and integration guides for these common platforms.

Does Authentik deployment support ArgoCD GitOps integration?▼

Authentik deployment fully supports ArgoCD GitOps integration using declarative blueprints. This allows you to automate flows, branding, application access policies, and LDAP source setup with built-in drift reconciliation.

How does Traefik forward auth work with a self-hosted IdP?▼

Traefik forward auth works with a self-hosted IdP by intercepting requests and validating identity before allowing traffic to upstream services. This Skill provides pre-configured Traefik forward auth middleware for immediate SSO enforcement.

Can I run an identity provider on Kubernetes in an airgapped environment?▼

Yes, you can run an identity provider on Kubernetes in an airgapped environment. The deployment configuration explicitly meets requirements for production Authentik deployments including airgapped environment support.

What is the best way to manage multiple domains and branding for SSO on Kubernetes?▼

The best way to manage multiple domains and branding for SSO on Kubernetes is through declarative Authentik blueprints. This approach automates custom multi-domain branding and application access policies without manual UI tweaking.

Related Skills

Explore More Software Engineering Skills→
apecloudapecloud
3

kubeblocks-manage-addons

Manage KubeBlocks addons to install, upgrade, and configure database engines.

Official
Intermediate
zmrezmre
1

auth-implementation-patterns

Implement authentication and authorization patterns for REST/GraphQL APIs with JWT and OAuth2.

Community
Basic
drgaciwdrgaciw

gitops-workflow

Implement GitOps workflows with ArgoCD and Flux CD for Kubernetes deployments.

Community
Advanced
wilfriedagowilfriedago
2

keycloak-administration

Configure Keycloak realms, clients, and authentication flows for SSO.

Community
Advanced