infisical: migrate all InfisicalSecrets to Kubernetes auth; drop universal-auth secret

2026-07-16 21:18:47 +02:00
parent 7526ea0a1b
commit 1d026f8d57
23 changed files with 154 additions and 93 deletions
--- a/applications/infisical/Infisical-secrets/authentik-infisicalsecret.yaml
+++ b/applications/infisical/Infisical-secrets/authentik-infisicalsecret.yaml
@@ -7,15 +7,17 @@ spec:
  hostAPI: https://infisical.jsme.be
  resyncInterval: 30
  authentication:
-    universalAuth:
+    kubernetesAuth:
+      identityId: "9f65814e-bf4c-42fc-b382-26be15b11416"
+      serviceAccountRef:
+        name: infisical-auth
+        namespace: infisical
+      autoCreateServiceAccountToken: true
      secretsScope:
        projectSlug: "kubernetes"
        envSlug: "prod"
        secretsPath: "/authentik"
        recursive: true
-      credentialsRef:
-        secretName: infisical-universal-auth
-        secretNamespace: infisical
  managedSecretReference:
    secretName: authentik-secrets
    secretNamespace: authentik