Story Crater Bot
674c8f0d66
- PostgreSQL 3-replica HA with pgvector - Vault S3 storage backend (MinIO) - Authentik federated OIDC provider - Vault auto-unseal via postStart hook
25 lines
559 B
YAML
25 lines
559 B
YAML
apiVersion: batch/v1
|
|
kind: Job
|
|
metadata:
|
|
name: authentik-migrations
|
|
namespace: iam
|
|
spec:
|
|
ttlSecondsAfterFinished: 600
|
|
backoffLimit: 3
|
|
template:
|
|
spec:
|
|
serviceAccountName: default
|
|
restartPolicy: Never
|
|
containers:
|
|
- name: migrate
|
|
image: ghcr.io/goauthentik/server:2026.5.4
|
|
imagePullPolicy: IfNotPresent
|
|
envFrom:
|
|
- secretRef:
|
|
name: authentik
|
|
command:
|
|
- /bin/sh
|
|
- -c
|
|
- |
|
|
python -m manage migrate --noinput && echo "✓ Migrations complete"
|