From 88cab601b22455d5a5226250345cd132d74860e8 Mon Sep 17 00:00:00 2001 From: chemavx Date: Mon, 22 Jun 2026 11:16:24 +0000 Subject: [PATCH] authentik: repoint server+worker secretKeyRefs to authentik-secrets-infisical Both AUTHENTIK_SECRET_KEY and AUTHENTIK_POSTGRESQL__PASSWORD (env) -> key POSTGRES_PASSWORD now sourced from the Infisical-synced secret. Stateless re: DB (media PVC only), DB-retry logic -> stay RollingUpdate, no Recreate flip. Applied via kubectl (not ArgoCD-managed). Co-Authored-By: Claude Opus 4.8 --- authentik/deployment-authentik-server.yaml | 4 ++-- authentik/deployment-authentik-worker.yaml | 4 ++-- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/authentik/deployment-authentik-server.yaml b/authentik/deployment-authentik-server.yaml index 9a0a709..7a8ee99 100644 --- a/authentik/deployment-authentik-server.yaml +++ b/authentik/deployment-authentik-server.yaml @@ -44,12 +44,12 @@ spec: valueFrom: secretKeyRef: key: POSTGRES_PASSWORD - name: authentik-secrets + name: authentik-secrets-infisical - name: AUTHENTIK_SECRET_KEY valueFrom: secretKeyRef: key: AUTHENTIK_SECRET_KEY - name: authentik-secrets + name: authentik-secrets-infisical - name: AUTHENTIK_ERROR_REPORTING__ENABLED value: 'false' image: ghcr.io/goauthentik/server:2024.12.3 diff --git a/authentik/deployment-authentik-worker.yaml b/authentik/deployment-authentik-worker.yaml index c989632..1742828 100644 --- a/authentik/deployment-authentik-worker.yaml +++ b/authentik/deployment-authentik-worker.yaml @@ -44,12 +44,12 @@ spec: valueFrom: secretKeyRef: key: POSTGRES_PASSWORD - name: authentik-secrets + name: authentik-secrets-infisical - name: AUTHENTIK_SECRET_KEY valueFrom: secretKeyRef: key: AUTHENTIK_SECRET_KEY - name: authentik-secrets + name: authentik-secrets-infisical - name: AUTHENTIK_ERROR_REPORTING__ENABLED value: 'false' image: ghcr.io/goauthentik/server:2024.12.3