chemavxandClaude Opus 4.8 88cab601b2 authentik: repoint server+worker secretKeyRefs to authentik-secrets-infisical ...

Both AUTHENTIK_SECRET_KEY and AUTHENTIK_POSTGRESQL__PASSWORD (env) -> key
POSTGRES_PASSWORD now sourced from the Infisical-synced secret. Stateless re: DB
(media PVC only), DB-retry logic -> stay RollingUpdate, no Recreate flip.
Applied via kubectl (not ArgoCD-managed).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-06-22 11:16:24 +00:00

..

deployment-authentik-redis.yaml

chore: pin all floating image tags to exact running versions

2026-04-15 08:11:22 +00:00

deployment-authentik-server.yaml

authentik: repoint server+worker secretKeyRefs to authentik-secrets-infisical

2026-06-22 11:16:24 +00:00

deployment-authentik-worker.yaml

authentik: repoint server+worker secretKeyRefs to authentik-secrets-infisical

2026-06-22 11:16:24 +00:00

infisical-authentik-secrets.yaml

authentik: add InfisicalStaticSecret for authentik-secrets (centralize SSO secret)

2026-06-22 11:14:18 +00:00

ingress-authentik.yaml

feat: export all K8 Plus cluster manifests

2026-04-10 08:57:02 +00:00

pvc-authentik-media-pvc.yaml

feat: export all K8 Plus cluster manifests

2026-04-10 08:57:02 +00:00

pvc-authentik-pg-pvc.yaml

feat: export all K8 Plus cluster manifests

2026-04-10 08:57:02 +00:00

service-authentik-redis.yaml

feat: export all K8 Plus cluster manifests

2026-04-10 08:57:02 +00:00

service-authentik-server.yaml

feat: export all K8 Plus cluster manifests

2026-04-10 08:57:02 +00:00

service-postgresql.yaml

feat: export all K8 Plus cluster manifests

2026-04-10 08:57:02 +00:00

statefulset-postgresql.yaml

authentik: repoint postgres sts POSTGRES_PASSWORD to authentik-secrets-infisical

2026-06-22 11:14:52 +00:00