chemavx/k8s-manifests
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

authentik: repoint postgres sts POSTGRES_PASSWORD to authentik-secrets-infisical

Browse Source 
Postgres-first cutover step. Already-initialized PG17 ignores POSTGRES_PASSWORD
on restart (role pw in pg_authid), so this byte-identical roll is benign.
StatefulSet RollingUpdate is ordered terminate-then-create (no two-postmaster
surge), so no Recreate flip. Applied via kubectl (not ArgoCD-managed).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
This commit is contained in:
chemavx
2026-06-22 11:14:52 +00:00
co-authored by Claude Opus 4.8
parent 26871ef0c3
commit 77b0b2385d
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
authentik/statefulset-postgresql.yaml
+1 -1
View File
@@ -29,7 +29,7 @@ spec:
valueFrom: valueFrom:
secretKeyRef: secretKeyRef:
key: POSTGRES_PASSWORD key: POSTGRES_PASSWORD
name: authentik-secrets name: authentik-secrets-infisical
- name: PGDATA - name: PGDATA
value: /var/lib/postgresql/data value: /var/lib/postgresql/data
image: postgres:17-alpine image: postgres:17-alpine