# The upstream Authentik chart is initially disabled. This wrapper first
# creates PostgreSQL, backup configuration, and persistent file storage so the
# existing installation can be restored before Authentik starts.
apiVersion: v2
name: authentik-app
description: Deploys Authentik with CloudNativePG and off-cluster backups
version: 0.1.0
type: application

dependencies:
  - name: authentik
    # Pin each release explicitly: Authentik database migrations require
    # sequential, verified upgrades through every release train.
    version: 2026.8.4
    repository: https://charts.goauthentik.io
    condition: authentikDeployment.enabled