psql pw

MetaObjects/authentik-keys.yml

@@ -30,3 +30,20 @@ spec:
       remoteRef:
         key: authentik/authentik
         property: secret_key
+---
+apiVersion: external-secrets.io/v1alpha1
+kind: ExternalSecret
+metadata:
+  name: ext-authentik-psql
+  namespace: authentik
+spec:
+  secretStoreRef:
+    name: ext-authentik-backend
+    kind: SecretStore
+  target:
+    name: postgres-secret
+  data:
+    - secretKey: password
+      remoteRef:
+        key: authentik/postgres
+        property: password

apps/templates/authentik.yaml

@@ -46,6 +46,11 @@ spec:
               key: AUTHENTIK_SECRET_KEY
               name: authentik-secret
 
+          AUTHENTIK_POSTGRESQL__PASSWORD:
+            secretKeyRef:
+              key: password
+              name: postgres-secret
+
         postgresql:
           image:
             registry: ghcr.io