apiVersion: secrets.infisical.com/v1alpha1
kind: InfisicalSecret
metadata:
  name: authentik-secrets
  namespace: infisical
spec:
  hostAPI: https://infisical.jsme.be
  resyncInterval: 30
  authentication:
    universalAuth:
      secretsScope:
        projectSlug: "kubernetes"
        envSlug: "prod"
        secretsPath: "/authentik"
        recursive: true
      credentialsRef:
        secretName: infisical-universal-auth
        secretNamespace: infisical
  managedSecretReference:
    secretName: authentik-secrets
    secretNamespace: authentik
    secretType: Opaque