diff --git a/k8s/infrastructure/minio/minio-tenant.yaml b/k8s/infrastructure/minio/minio-tenant.yaml
index 2a09c95..876d248 100644
--- a/k8s/infrastructure/minio/minio-tenant.yaml
+++ b/k8s/infrastructure/minio/minio-tenant.yaml
@@ -89,23 +89,5 @@ spec:
 
   # ── OIDC via Authentik (server-side env, valid in v2 schema) ────────────────
   env:
-    - name: MINIO_IDENTITY_OPENID_CONFIG_URL
-      value: "https://authentik.riotpiao.com/application/o/minio/.well-known/openid-configuration"
-    - name: MINIO_IDENTITY_OPENID_CLIENT_ID
-      value: "minio"
-    - name: MINIO_IDENTITY_OPENID_CLIENT_SECRET
-      valueFrom:
-        secretKeyRef:
-          name: minio-oidc
-          key: MINIO_IDENTITY_OPENID_CLIENT_SECRET
-    - name: MINIO_IDENTITY_OPENID_CLAIM_NAME
-      value: "policy"
     - name: MINIO_IDENTITY_OPENID_SCOPES
       value: "openid,profile,email,minio"
-    - name: MINIO_IDENTITY_OPENID_REDIRECT_URI
-      value: "https://minio.riotpiao.com/oauth_callback"
-    - name: MINIO_IDENTITY_OPENID_DISPLAY_NAME
-      value: "Authentik"
-
-  # cert-manager handles TLS; no operator auto-cert.
-  requestAutoCert: false