authentik: DISREGARD THAT I SUC--cluster support should be there as long as the URLs are defined individually

authentik/values.yaml

@@ -62,7 +62,29 @@ authentik:
           secretKeyRef:
             name: authentik-db-auth
             key: password
+      - name: AUTHENTIK_RESULT_BACKEND__URL
+        value: authentik-kv-headless.authentik.svc.cluster.local
+      - name: AUTHENTIK_CACHE__URL
+        value: authentik-kv-headless.authentik.svc.cluster.local
+      - name: AUTHENTIK_CHANNEL__URL
+        value: authentik-kv-headless.authentik.svc.cluster.local
+      - name: AUTHENTIK_BROKER__URL
+        value: authentik-kv-headless.authentik.svc.cluster.local
   additionalObjects:
+    - apiVersion: hyperspike.io/v1
+      kind: Valkey
+      metadata:
+        name: authentik-kv
+      spec:
+        anonymousAuth: true
+        certIssuerType: ClusterIssuer
+        clusterDomain: cluster.local
+        clusterPreferredEndpointType: ip
+        nodes: 1
+        prometheus: false
+        replicas: 3
+        tls: false
+        volumePermissions: true
     - apiVersion: networking.k8s.io/v1
       kind: Ingress
       metadata: