Files
Kubernetes-Manifests/applications/authentik/postgres/authentik-postgres-statefulset.yaml
T
Jeffrey 079830a8ff authentik: migrate to envFrom with per-container InfisicalSecrets
Server and worker share one Secret since their env is byte-identical. Database and SMTP values are Infisical references rather than copies.
2026-08-24 00:16:26 +02:00

38 lines
894 B
YAML

apiVersion: apps/v1
kind: StatefulSet
metadata:
name: authentik-postgresql
namespace: authentik
spec:
serviceName: authentik-postgresql
replicas: 1
selector:
matchLabels:
app: authentik-postgresql
template:
metadata:
labels:
app: authentik-postgresql
spec:
containers:
- name: authentik-postgresql
image: postgres:16-alpine
ports:
- containerPort: 5432
envFrom:
- secretRef:
name: authentik-postgres-secrets
volumeMounts:
- name: data
mountPath: /var/lib/postgresql/data
resources:
requests:
cpu: 100m
memory: 256Mi
limits:
memory: 512Mi
volumes:
- name: data
persistentVolumeClaim:
claimName: authentik-postgres-data