A lowly tech priest's attempt to please Mars
feat: update authentik to remove redis/valkey dependency
+18
-26
+3
-14
kubernetes/apps/authentication/authentik/helmrelease.yaml
+3
-14
kubernetes/apps/authentication/authentik/helmrelease.yaml
···
5
5
name: authentik
6
6
spec:
7
7
interval: 30m
8
-
chart:
9
-
spec:
10
-
chart: authentik
11
-
version: 2025.8.1
12
-
sourceRef:
13
-
kind: HelmRepository
14
-
name: authentik-charts
15
-
interval: 5m
8
+
chartRef:
9
+
kind: OCIRepository
10
+
name: authentik
16
11
values:
17
12
global:
18
13
podAnnotations:
···
27
22
- name: AUTHENTIK_POSTGRESQL__SSLMODE
28
23
value: "verify-full"
29
24
- name: AUTHENTIK_POSTGRESQL__SSLROOTCERT
30
-
value: /service-certs/ca-certificates.crt
31
-
- name: AUTHENTIK_REDIS__TLS
32
-
value: "true"
33
-
- name: AUTHENTIK_REDIS__TLS_REQS
34
-
value: required
35
-
- name: AUTHENTIK_REDIS__TLS_CA_CERT
36
25
value: /service-certs/ca-certificates.crt
37
26
38
27
volumeMounts:
+9
-4
kubernetes/apps/authentication/authentik/helmrepo.yaml
+9
-4
kubernetes/apps/authentication/authentik/helmrepo.yaml
···
1
1
# yaml-language-server: $schema=https://github.com/fluxcd-community/flux2-schemas/raw/refs/heads/main/all.json
2
2
apiVersion: source.toolkit.fluxcd.io/v1
3
-
kind: HelmRepository
3
+
kind: OCIRepository
4
4
metadata:
5
-
name: authentik-charts
5
+
name: authentik
6
6
spec:
7
-
interval: 30m
8
-
url: https://charts.goauthentik.io
7
+
interval: 2h
8
+
url: oci://ghcr.io/goauthentik/helm-charts/authentik
9
+
layerSelector:
10
+
mediaType: "application/vnd.cncf.helm.chart.content.v1.tar+gzip"
11
+
operation: copy
12
+
ref:
13
+
tag: 2025.10.1
+6
-8
kubernetes/apps/authentication/authentik/secrets.yaml
+6
-8
kubernetes/apps/authentication/authentik/secrets.yaml
···
7
7
AUTHENTIK_POSTGRESQL__NAME: ENC[AES256_GCM,data:n+zofUo0tfTh,iv:rWqB8svicO6wryLdiMQsmruc2aCnBwSwQKSly1RrMwk=,tag:7Q5fKf6P0WR2rhWUr0581Q==,type:str]
8
8
AUTHENTIK_POSTGRESQL__USER: ENC[AES256_GCM,data:9edCxQc9uONM,iv:bj/E8I72l0oWOu1lTcFp6iFE2cFJLkOGSmKJ0vV2bYw=,tag:PTa0bAG0vGBy/jfwTidrlw==,type:str]
9
9
AUTHENTIK_POSTGRESQL__PASSWORD: ENC[AES256_GCM,data:o14PA/W8UaZP9NKjzpiPRof/bY2UIh8N0gN/KV+8mqg=,iv:xXLANuawzslEQkOV4Qq9FLmQAIaEKUq9/Ph4gVeOi7A=,tag:hN/JzBS/ET68/iDBR8myhQ==,type:str]
10
-
AUTHENTIK_REDIS__HOST: ENC[AES256_GCM,data:mRlobhsk/VfyHyZdhxWrAjpyaQkjcnXOmTcRQkA=,iv:IS7cQyLgbqhlI3DgJNK2jtbtaCcuF/Pl6EHHhVLYsNY=,tag:DLTMeVJI09oHxObVlB59Iw==,type:str]
11
-
AUTHENTIK_REDIS__PASSWORD: ENC[AES256_GCM,data:M8onp0AXmeLYSo0dJX0fzg4iwUgDADpegOS3J7DGvUE=,iv:OGX6jtbPUZTY6XldccmgvVRHt1dss9lwkdxikks8OyU=,tag:6StXLTey6TVfvntCJFwqog==,type:str]
12
10
AUTHENTIK_STORAGE__MEDIA__BACKEND: ENC[AES256_GCM,data:gbc=,iv:8M+/Izh7oYJ9/RycK8+XNGJh4Lxd73WNffYsWJXy6H0=,tag:To/hXqggLO8t+EKIe3ny0Q==,type:str]
13
11
AUTHENTIK_STORAGE__MEDIA__S3__ACCESS_KEY: ENC[AES256_GCM,data:bXwbSjoSm6klcz2QrQb6zj8iKOs=,iv:J7xFMXZ6l+61BBUwXV58HQ4unxLFlA+tJjwkfk58jrc=,tag:hIUFc+tdTOkdzqsajxJkBQ==,type:str]
14
12
AUTHENTIK_STORAGE__MEDIA__S3__SECRET_KEY: ENC[AES256_GCM,data:xxHnuKAiUwdMf5BDMQhCJNNgGQWdqsg63+4oVQ7NhFwtfVoTp18g2g==,iv:TxEK1V42S1Oa6ZpJbcRoEMi9tMASRozCHwnfw+1t4/k=,tag:B4qiW3SoPhRyD3NP/zMWjw==,type:str]
···
45
43
VXB4ZGRIMjVUTHFVT1pob0VNVk10UFEKnxgmYjQfyjeyhmxUqtLpVLrp0dz9mhPg
46
44
nh3KFYRuOu7vPI+yXuh9Fv5U2Bnw2CaZcvpo5rO0s4p+ys1/IWIoMw==
47
45
-----END AGE ENCRYPTED FILE-----
48
-
lastmodified: "2025-10-02T20:46:00Z"
49
-
mac: ENC[AES256_GCM,data:UhiP+RdimeA/06bhIZdTPBnmdo1MoG/YJU2bI0w0bsO2ikqFFSvyq+7fuLtuL6tWCvf3PU3CX6+zuOU4gKH4qrwPgnCmOrE0hz/slHW35xfNL5kzUrf3p+Poh1LyA6W3FQi8nUFCX8wcRSWjbcb35+yc7J/HIv4S7Kh1xCkdF+c=,iv:vopeupEqDB6C9X8WUm2Xy/4XdLkQe0ov0blOJoGwTG8=,tag:XCBXR7ZMjNlg07njV/dI8Q==,type:str]
46
+
lastmodified: "2025-11-09T11:35:25Z"
47
+
mac: ENC[AES256_GCM,data:TVku5mtmQ6646a1kI1NXx4W73v7jXXdjh+CTkYxUJTkmuXJoDFDCToJxgOEDS4su6cx6VQny5mWVhneyRpNfGTP8QnVMFKQ1Rd+svb0to57Y20efilrk9Hm36lgKYZWVXVswmC8TPNC9UZ+pqkXDt51v7NHHCpk1F5CgJwLQZ1U=,iv:CktEAZYR/brmJYW42NGhuU16qCYWBapkh4M6kvNv0dg=,tag:u7ZIvr9msnWaqDVXeUnxIA==,type:str]
50
48
encrypted_regex: ^(data|stringData)$
51
-
version: 3.10.2
49
+
version: 3.11.0
52
50
---
53
51
apiVersion: v1
54
52
kind: Secret
···
81
79
VXB4ZGRIMjVUTHFVT1pob0VNVk10UFEKnxgmYjQfyjeyhmxUqtLpVLrp0dz9mhPg
82
80
nh3KFYRuOu7vPI+yXuh9Fv5U2Bnw2CaZcvpo5rO0s4p+ys1/IWIoMw==
83
81
-----END AGE ENCRYPTED FILE-----
84
-
lastmodified: "2025-10-02T20:46:00Z"
85
-
mac: ENC[AES256_GCM,data:UhiP+RdimeA/06bhIZdTPBnmdo1MoG/YJU2bI0w0bsO2ikqFFSvyq+7fuLtuL6tWCvf3PU3CX6+zuOU4gKH4qrwPgnCmOrE0hz/slHW35xfNL5kzUrf3p+Poh1LyA6W3FQi8nUFCX8wcRSWjbcb35+yc7J/HIv4S7Kh1xCkdF+c=,iv:vopeupEqDB6C9X8WUm2Xy/4XdLkQe0ov0blOJoGwTG8=,tag:XCBXR7ZMjNlg07njV/dI8Q==,type:str]
82
+
lastmodified: "2025-11-09T11:35:25Z"
83
+
mac: ENC[AES256_GCM,data:TVku5mtmQ6646a1kI1NXx4W73v7jXXdjh+CTkYxUJTkmuXJoDFDCToJxgOEDS4su6cx6VQny5mWVhneyRpNfGTP8QnVMFKQ1Rd+svb0to57Y20efilrk9Hm36lgKYZWVXVswmC8TPNC9UZ+pqkXDt51v7NHHCpk1F5CgJwLQZ1U=,iv:CktEAZYR/brmJYW42NGhuU16qCYWBapkh4M6kvNv0dg=,tag:u7ZIvr9msnWaqDVXeUnxIA==,type:str]
86
84
encrypted_regex: ^(data|stringData)$
87
-
version: 3.10.2
85
+
version: 3.11.0