From fe0257a3ab2019d3ec47ccb6720905208fe209d3 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Simen=20R=C3=B8stvik?= <simen.rostvik@crayon.com>
Date: Thu, 15 Dec 2022 15:44:32 +0100
Subject: [PATCH] psql pw

---
 MetaObjects/authentik-keys.yml | 17 +++++++++++++++++
 apps/templates/authentik.yaml  |  5 +++++
 2 files changed, 22 insertions(+)

diff --git a/MetaObjects/authentik-keys.yml b/MetaObjects/authentik-keys.yml
index d4e9169..d5d7151 100644
--- a/MetaObjects/authentik-keys.yml
+++ b/MetaObjects/authentik-keys.yml
@@ -30,3 +30,20 @@ spec:
       remoteRef:
         key: authentik/authentik
         property: secret_key
+---
+apiVersion: external-secrets.io/v1alpha1
+kind: ExternalSecret
+metadata:
+  name: ext-authentik-psql
+  namespace: authentik
+spec:
+  secretStoreRef:
+    name: ext-authentik-backend
+    kind: SecretStore
+  target:
+    name: postgres-secret
+  data:
+    - secretKey: password
+      remoteRef:
+        key: authentik/postgres
+        property: password
diff --git a/apps/templates/authentik.yaml b/apps/templates/authentik.yaml
index 0d2a4f3..f72e1bd 100644
--- a/apps/templates/authentik.yaml
+++ b/apps/templates/authentik.yaml
@@ -46,6 +46,11 @@ spec:
               key: AUTHENTIK_SECRET_KEY
               name: authentik-secret
 
+          AUTHENTIK_POSTGRESQL__PASSWORD:
+            secretKeyRef:
+              key: password
+              name: postgres-secret
+
         postgresql:
           image:
             registry: ghcr.io