Docs
Helm-Charts
matrix-authentication-service

matrix-authentication-service

matrix-authentication-service

Version: 0.0.7 Type: application AppVersion: 0.11.0

OAuth2.0 + OpenID Provider for Matrix Homeservers (per MSC3861)

Maintainers

NameEmailUrl
WrenIXhttps://wrenix.eu

Usage

Helm must be installed and setup to your kubernetes cluster to use the charts. Refer to Helm’s documentation to get started. Once Helm has been set up correctly, fetch the charts as follows:

helm pull oci://codeberg.org/wrenix/helm-charts/matrix-authentication-service

You can install a chart release using the following command:

helm install matrix-authentication-service-release oci://codeberg.org/wrenix/helm-charts/matrix-authentication-service --values values.yaml

To uninstall a chart release use helm’s delete command:

helm uninstall matrix-authentication-service-release

Values

KeyTypeDefaultDescription
affinityobject{}
autoscaling.enabledboolfalse
autoscaling.maxReplicasint100
autoscaling.minReplicasint1
autoscaling.targetCPUUtilizationPercentageint80
config.branding.imprintstringnil
config.branding.logo_uristringnil
config.branding.policy_uristringnil
config.branding.service_namestringnil
config.branding.tos_uristringnil
config.clientslist[]
config.database.connect_timeoutint30
config.database.databasestring"sliding_sync"
config.database.hoststring"localhost"
config.database.idle_timeoutint600
config.database.max_connectionsint10
config.database.max_lifetimeint1800
config.database.min_connectionsint0
config.database.passwordstring"secret"
config.database.portint5432
config.database.usernamestring"sliding_sync"
config.email.fromstring"\"Authentication Service\" <root@localhost>"
config.email.reply_tostring"\"Authentication Service\" <root@localhost>"
config.email.transportstring"blackhole"
config.experimental.access_token_ttlint300
config.experimental.compat_token_ttlint300
config.http.issuerstring"http://[::]:8080/"
config.http.listeners[0].binds[0].addressstring"[::]:8080"
config.http.listeners[0].namestring"http"
config.http.listeners[0].proxy_protocolboolfalse
config.http.listeners[0].resources[0].namestring"discovery"
config.http.listeners[0].resources[1].namestring"human"
config.http.listeners[0].resources[2].namestring"oauth"
config.http.listeners[0].resources[3].namestring"compat"
config.http.listeners[0].resources[4].namestring"graphql"
config.http.listeners[0].resources[4].playgroundbooltrue
config.http.listeners[0].resources[5].namestring"assets"
config.http.listeners[0].resources[5].pathstring"/usr/local/share/mas-cli/assets/"
config.http.listeners[1].binds[0].addressstring"[::]:8081"
config.http.listeners[1].namestring"internal"
config.http.listeners[1].resources[0].namestring"health"
config.http.listeners[2].binds[0].addressstring"[::]:9100"
config.http.listeners[2].namestring"metrics"
config.http.listeners[2].resources[0].namestring"prometheus"
config.http.public_basestring"http://[::]:8080/"
config.http.trusted_proxies[0]string"192.128.0.0/16"
config.http.trusted_proxies[1]string"172.16.0.0/12"
config.http.trusted_proxies[2]string"10.0.0.0/10"
config.http.trusted_proxies[3]string"127.0.0.1/8"
config.http.trusted_proxies[4]string"fd00::/8"
config.http.trusted_proxies[5]string"::1/128"
config.matrix.endpointstring"http://localhost:8008/"
config.matrix.homeserverstring"localhost:8008"
config.matrix.secretstring"kPnqGbK9hmSRK41DZTgVJxfKVAiLrY6G"
config.passwords.enabledbooltrue
config.passwords.schemes[0].algorithmstring"argon2id"
config.passwords.schemes[0].versionint1
config.policy.authorization_grant_entrypointstring"authorization_grant/violation"
config.policy.client_registration_entrypointstring"client_registration/violation"
config.policy.datastringnil
config.policy.email_entrypointstring"email/violation"
config.policy.password_entrypointstring"password/violation"
config.policy.register_entrypointstring"register/violation"
config.policy.wasm_modulestring"/usr/local/share/mas-cli/policy.wasm"
config.secrets.encryptionstringnil
config.secrets.keyslist[]
config.telemetry.metrics.exporterstring"prometheus"
config.telemetry.sentry.dsnstringnil
config.telemetry.tracing.exporterstring"none"
config.telemetry.tracing.propagatorslist[]
config.templates.assets_manifeststring"/usr/local/share/mas-cli/manifest.json"
config.templates.pathstring"/usr/local/share/mas-cli/templates/"
config.templates.translations_pathstring"/usr/local/share/mas-cli/translations/"
config.upstream_oauth2.providerslist[]
fullnameOverridestring""
global.image.pullPolicystringnilif set it will overwrite all pullPolicy
global.image.registrystringnilif set it will overwrite all registry entries
image.pullPolicystring"IfNotPresent"
image.registrystring"ghcr.io"
image.repositorystring"matrix-org/matrix-authentication-service"
image.tagstringnilOverrides the image tag whose default is the chart appVersion.
imagePullSecretslist[]
ingress.annotationsobject{}
ingress.classNamestring""
ingress.enabledboolfalse
ingress.hosts[0].hoststring"auth.matrix.chart-example.local"
ingress.hosts[0].paths[0].pathstring"/l"
ingress.hosts[0].paths[0].pathTypestring"Prefix"
ingress.hosts[1].hoststring"matrix.chart-example.local"
ingress.hosts[1].paths[0].pathstring"/_matrix/client/v3/login"
ingress.hosts[1].paths[0].pathTypestring"Exact"
ingress.hosts[1].paths[1].pathstring"/_matrix/client/v3/logout"
ingress.hosts[1].paths[1].pathTypestring"Exact"
ingress.hosts[1].paths[2].pathstring"/_matrix/client/v3/refresh"
ingress.hosts[1].paths[2].pathTypestring"Exact"
ingress.tlslist[]
livenessProbe.httpGet.pathstring"/health"
livenessProbe.httpGet.portstring"internal"
nameOverridestring""
nodeSelectorobject{}
podAnnotationsobject{}
podLabelsobject{}
podSecurityContext.fsGroupint1000
prometheus.servicemonitor.enabledboolfalse
prometheus.servicemonitor.labelsobject{}
readinessProbe.httpGet.pathstring"/health"
readinessProbe.httpGet.portstring"internal"
replicaCountint1
resourcesobject{}
securityContext.capabilities.drop[0]string"ALL"
securityContext.readOnlyRootFilesystembooltrue
securityContext.runAsNonRootbooltrue
securityContext.runAsUserint1000
service.port.httpint8080
service.port.metricsint9100
service.typestring"ClusterIP"
serviceAccount.annotationsobject{}
serviceAccount.automountbooltrue
serviceAccount.createbooltrue
serviceAccount.namestring""
tolerationslist[]
volumeMountslist[]
volumeslist[]

Autogenerated from chart metadata using helm-docs

jellyfinmatrix-sliding-sync