authentik: migrate to envFrom with per-container InfisicalSecrets

Server and worker share one Secret since their env is byte-identical. Database and SMTP values are Infisical references rather than copies.
2026-08-24 00:16:26 +02:00
parent 3e13b76c6a
commit 079830a8ff
5 changed files with 39 additions and 134 deletions
@@ -1,24 +0,0 @@
-apiVersion: secrets.infisical.com/v1alpha1
-kind: InfisicalSecret
-metadata:
-  name: authentik-secrets
-  namespace: infisical
-spec:
-  hostAPI: https://infisical.jsme.be
-  resyncInterval: 30
-  authentication:
-    kubernetesAuth:
-      identityId: "5458def7-7c63-40d2-95da-41c614d0933a"
-      serviceAccountRef:
-        name: infisical-auth
-        namespace: infisical
-      autoCreateServiceAccountToken: true
-      secretsScope:
-        projectSlug: "kubernetes"
-        envSlug: "prod"
-        secretsPath: "/authentik"
-        recursive: true
-  managedSecretReference:
-    secretName: authentik-secrets
-    secretNamespace: authentik
-    secretType: Opaque