Complete Authentik Kubernetes cutover
This commit is contained in:
@@ -67,9 +67,9 @@ authentik:
|
|||||||
enabled: false
|
enabled: false
|
||||||
|
|
||||||
server:
|
server:
|
||||||
# Final-cutover maintenance window: prevent writes to the destination while
|
# One server is sufficient for this homelab; Kubernetes recreates it if the
|
||||||
# its trial snapshot is replaced. Return this to 1 after the final restore.
|
# Pod fails, while PostgreSQL and uploaded files live on persistent storage.
|
||||||
replicas: 0
|
replicas: 1
|
||||||
# UID/GID 1000 matches the restored Docker files and satisfies this
|
# UID/GID 1000 matches the restored Docker files and satisfies this
|
||||||
# namespace's restricted Pod Security policy without running as root.
|
# namespace's restricted Pod Security policy without running as root.
|
||||||
securityContext:
|
securityContext:
|
||||||
@@ -107,9 +107,9 @@ authentik:
|
|||||||
- auth.ahmza.com
|
- auth.ahmza.com
|
||||||
|
|
||||||
worker:
|
worker:
|
||||||
# Workers run scheduled jobs, source synchronization, and other background
|
# One worker handles scheduled jobs, source synchronization, email, and
|
||||||
# tasks. Keep them off while the original VM remains authoritative.
|
# management of Kubernetes-native outposts.
|
||||||
replicas: 0
|
replicas: 1
|
||||||
securityContext:
|
securityContext:
|
||||||
runAsNonRoot: true
|
runAsNonRoot: true
|
||||||
runAsUser: 1000
|
runAsUser: 1000
|
||||||
|
|||||||
Reference in New Issue
Block a user