ZITADEL Helm

Overview

ZITADEL deployed via HelmRelease (Flux) with external PostgreSQL (CNPG), Gateway API routing (Cilium Gateway), memory caching. Two containers: main ZITADEL API (Go) and Login UI (Next.js). Init + setup jobs bootstrap the FirstInstance on install.

Latest stable: chart 10.0.4 → ZITADEL v4.15.3. See artifacthub for latest version.

Architecture

Gateway API (e.g., Cilium, Istio, Envoy Gateway)
  ├── HTTPRoute "zitadel"         → zitadel:8080 (h2c)
  ├── HTTPRoute "zitadel-login"   → zitadel-login:3000  (/ui/v2/login)
  └── GRPCRoute (optional)        → zitadel:8080 (gRPC)