# The upstream Authentik chart is initially disabled. This wrapper first
# creates PostgreSQL, backup configuration, and persistent file storage so the
# existing installation can be restored before Authentik starts.
apiVersion: v2
name: authentik-app
description: Deploys Authentik with CloudNativePG and off-cluster backups
version: 0.1.0
type: application

dependencies:
  - name: authentik
    # Match the source Docker deployment for the migration. Upgrade only after
    # the restored installation has been verified in Kubernetes.
    version: 2026.2.1
    repository: https://charts.goauthentik.io
    condition: authentikDeployment.enabled