chemavx/k8s-manifests
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

authentik: repoint server+worker secretKeyRefs to authentik-secrets-infisical

Browse Source 
Both AUTHENTIK_SECRET_KEY and AUTHENTIK_POSTGRESQL__PASSWORD (env) -> key
POSTGRES_PASSWORD now sourced from the Infisical-synced secret. Stateless re: DB
(media PVC only), DB-retry logic -> stay RollingUpdate, no Recreate flip.
Applied via kubectl (not ArgoCD-managed).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
This commit is contained in:
chemavx
2026-06-22 11:16:24 +00:00
co-authored by Claude Opus 4.8
parent 77b0b2385d
commit 88cab601b2
2 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
authentik/deployment-authentik-server.yaml
+2 -2
View File
@@ -44,12 +44,12 @@ spec:
valueFrom: valueFrom:
secretKeyRef: secretKeyRef:
key: POSTGRES_PASSWORD key: POSTGRES_PASSWORD
name: authentik-secrets name: authentik-secrets-infisical
- name: AUTHENTIK_SECRET_KEY - name: AUTHENTIK_SECRET_KEY
valueFrom: valueFrom:
secretKeyRef: secretKeyRef:
key: AUTHENTIK_SECRET_KEY key: AUTHENTIK_SECRET_KEY
name: authentik-secrets name: authentik-secrets-infisical
- name: AUTHENTIK_ERROR_REPORTING__ENABLED - name: AUTHENTIK_ERROR_REPORTING__ENABLED
value: 'false' value: 'false'
image: ghcr.io/goauthentik/server:2024.12.3 image: ghcr.io/goauthentik/server:2024.12.3
authentik/deployment-authentik-worker.yaml
+2 -2
View File
@@ -44,12 +44,12 @@ spec:
valueFrom: valueFrom:
secretKeyRef: secretKeyRef:
key: POSTGRES_PASSWORD key: POSTGRES_PASSWORD
name: authentik-secrets name: authentik-secrets-infisical
- name: AUTHENTIK_SECRET_KEY - name: AUTHENTIK_SECRET_KEY
valueFrom: valueFrom:
secretKeyRef: secretKeyRef:
key: AUTHENTIK_SECRET_KEY key: AUTHENTIK_SECRET_KEY
name: authentik-secrets name: authentik-secrets-infisical
- name: AUTHENTIK_ERROR_REPORTING__ENABLED - name: AUTHENTIK_ERROR_REPORTING__ENABLED
value: 'false' value: 'false'
image: ghcr.io/goauthentik/server:2024.12.3 image: ghcr.io/goauthentik/server:2024.12.3