From 77b0b2385deb3873c982bc1bdbc10312bb59cf42 Mon Sep 17 00:00:00 2001 From: chemavx Date: Mon, 22 Jun 2026 11:14:52 +0000 Subject: [PATCH] authentik: repoint postgres sts POSTGRES_PASSWORD to authentik-secrets-infisical Postgres-first cutover step. Already-initialized PG17 ignores POSTGRES_PASSWORD on restart (role pw in pg_authid), so this byte-identical roll is benign. StatefulSet RollingUpdate is ordered terminate-then-create (no two-postmaster surge), so no Recreate flip. Applied via kubectl (not ArgoCD-managed). Co-Authored-By: Claude Opus 4.8 --- authentik/statefulset-postgresql.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/authentik/statefulset-postgresql.yaml b/authentik/statefulset-postgresql.yaml index 2c86a88..a8c7671 100644 --- a/authentik/statefulset-postgresql.yaml +++ b/authentik/statefulset-postgresql.yaml @@ -29,7 +29,7 @@ spec: valueFrom: secretKeyRef: key: POSTGRES_PASSWORD - name: authentik-secrets + name: authentik-secrets-infisical - name: PGDATA value: /var/lib/postgresql/data image: postgres:17-alpine