diff --git a/MetaObjects/authentik-keys.yml b/MetaObjects/authentik-keys.yml index d4e9169..d5d7151 100644 --- a/MetaObjects/authentik-keys.yml +++ b/MetaObjects/authentik-keys.yml @@ -30,3 +30,20 @@ spec: remoteRef: key: authentik/authentik property: secret_key +--- +apiVersion: external-secrets.io/v1alpha1 +kind: ExternalSecret +metadata: + name: ext-authentik-psql + namespace: authentik +spec: + secretStoreRef: + name: ext-authentik-backend + kind: SecretStore + target: + name: postgres-secret + data: + - secretKey: password + remoteRef: + key: authentik/postgres + property: password diff --git a/apps/templates/authentik.yaml b/apps/templates/authentik.yaml index 0d2a4f3..f72e1bd 100644 --- a/apps/templates/authentik.yaml +++ b/apps/templates/authentik.yaml @@ -46,6 +46,11 @@ spec: key: AUTHENTIK_SECRET_KEY name: authentik-secret + AUTHENTIK_POSTGRESQL__PASSWORD: + secretKeyRef: + key: password + name: postgres-secret + postgresql: image: registry: ghcr.io