From 038b3396abd686cb9aff856a39d6c162954708ca Mon Sep 17 00:00:00 2001
From: ahmza <hamza@ahmza.com>
Date: Thu, 22 Oct 2026 17:55:26 +0000
Subject: [PATCH] Use Recreate strategy for Authentik

---
 apps/authentik/values.yaml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/apps/authentik/values.yaml b/apps/authentik/values.yaml
index 396751a..b9bb500 100644
--- a/apps/authentik/values.yaml
+++ b/apps/authentik/values.yaml
@@ -6,6 +6,12 @@ authentikDeployment:
 
 authentik:
   global:
+    # Server and worker share one ReadWriteOnce Longhorn volume. Recreate stops
+    # the old Pods before replacements start, allowing the volume to move nodes
+    # instead of leaving a rolling update blocked by a multi-attach error.
+    deploymentStrategy:
+      type: Recreate
+
     # CloudNativePG generates this connection Secret. Referencing individual
     # keys avoids duplicating its generated database password in Git or SOPS.
     env: