k8s-manifests

Files

T

chemavxandClaude Opus 4.8 77b0b2385d authentik: repoint postgres sts POSTGRES_PASSWORD to authentik-secrets-infisical

Postgres-first cutover step. Already-initialized PG17 ignores POSTGRES_PASSWORD
on restart (role pw in pg_authid), so this byte-identical roll is benign.
StatefulSet RollingUpdate is ordered terminate-then-create (no two-postmaster
surge), so no Recreate flip. Applied via kubectl (not ArgoCD-managed).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-06-22 11:14:52 +00:00

deployment-authentik-redis.yaml

chore: pin all floating image tags to exact running versions

2026-04-15 08:11:22 +00:00

deployment-authentik-server.yaml

feat: export all K8 Plus cluster manifests

2026-04-10 08:57:02 +00:00

deployment-authentik-worker.yaml

feat: export all K8 Plus cluster manifests

2026-04-10 08:57:02 +00:00

infisical-authentik-secrets.yaml

authentik: add InfisicalStaticSecret for authentik-secrets (centralize SSO secret)