Authentik (Auth)

Authentik is the SSO/OIDC identity provider for the MEGATRON cluster, providing centralized authentication for all services.

Overview

PropertyValue
Domainauth.m3gatr0n.com
Namespaceauthentik
TypeOIDC/SAML/LDAP identity provider
ComponentsServer, Worker, Redis, PostgreSQL

Components

PodPurposeStatus
authentik-serverMain Authentik application serverRunning
authentik-workerBackground task processorRunning (12 restarts)

Access

  • Admin UI: https://auth.m3gatr0n.com/if/admin/
  • User Portal: https://auth.m3gatr0n.com/

Capabilities

  • OIDC/OAuth2 provider for application SSO
  • SAML 2.0 for enterprise integrations
  • LDAP outpost for legacy applications
  • Flows and stages for customizable authentication
  • MFA support (TOTP, WebAuthn, SMS)
kubectl get pods -n authentik
kubectl logs -n authentik -l app.kubernetes.io/name=authentik-server --tail=50

TODO: expand with OIDC client configurations, connected applications, and flow details.