fix: extract auth config to ConfigMap + SOPS, update Authentik slug #40

Merged
rock merged 1 commits from fix/auth-configmap-sops into main 2026-09-08 05:34:18 +00:00
1 Commits
Author SHA1 Message Date
rock c538397db4 fix: extract auth config to ConfigMap + SOPS secret, update slug to poimen
CI / CI (pull_request) Successful in 4m21s
- Add k8s/app/config.yaml (ConfigMap) for non-sensitive env vars
- Add k8s/app/auth.enc.yaml (SOPS-encrypted) for AUTHENTIK_ISSUER, AUDIENCE
- Add k8s/app/secret-generator.yaml (KSOPS generator for ArgoCD)
- Deployment uses envFrom instead of inline env vars
- Update Authentik slug from poimen-memory to poimen (404 on OIDC discovery)
- Update OpenSearch JWKS/issuer URLs to match new slug
- Reloader (auto-reload-all=true) triggers rollout on config change
2026-09-07 22:25:44 -07:00