From 596fa5380aac4e5f0b8b2b04d2bc3f0320e404bb Mon Sep 17 00:00:00 2001
From: Jeffrey Smeets <jeffreysmeets@jsme.be>
Date: Wed, 15 Jul 2026 21:54:43 +0200
Subject: [PATCH] infisical(netbootxyz): switch to Kubernetes auth (pilot)

---
 .../Infisical-secrets/netbootxyz-infisicalsecret.yaml    | 9 +++++----
 1 file changed, 5 insertions(+), 4 deletions(-)

diff --git a/applications/infisical/Infisical-secrets/netbootxyz-infisicalsecret.yaml b/applications/infisical/Infisical-secrets/netbootxyz-infisicalsecret.yaml
index db895b7..5cfa1ef 100644
--- a/applications/infisical/Infisical-secrets/netbootxyz-infisicalsecret.yaml
+++ b/applications/infisical/Infisical-secrets/netbootxyz-infisicalsecret.yaml
@@ -7,15 +7,16 @@ spec:
   hostAPI: https://infisical.jsme.be
   resyncInterval: 30
   authentication:
-    universalAuth:
+    kubernetesAuth:
+      identityId: "9f65814e-bf4c-42fc-b382-26be15b11416"
+      serviceAccountRef:
+        name: infisical-auth
+        namespace: infisical
       secretsScope:
         projectSlug: "kubernetes"
         envSlug: "prod"
         secretsPath: "/netbootxyz"
         recursive: true
-      credentialsRef:
-        secretName: infisical-universal-auth
-        secretNamespace: infisical
   managedSecretReference:
     secretName: netbootxyz-secrets
     secretNamespace: netbootxyz