Complete Authentik Kubernetes cutover

This commit is contained in:
2026-10-16 17:05:38 +00:00
parent 9b5dff602a
commit c1437d9199
+6 -6
View File
@@ -67,9 +67,9 @@ authentik:
enabled: false enabled: false
server: server:
# Final-cutover maintenance window: prevent writes to the destination while # One server is sufficient for this homelab; Kubernetes recreates it if the
# its trial snapshot is replaced. Return this to 1 after the final restore. # Pod fails, while PostgreSQL and uploaded files live on persistent storage.
replicas: 0 replicas: 1
# UID/GID 1000 matches the restored Docker files and satisfies this # UID/GID 1000 matches the restored Docker files and satisfies this
# namespace's restricted Pod Security policy without running as root. # namespace's restricted Pod Security policy without running as root.
securityContext: securityContext:
@@ -107,9 +107,9 @@ authentik:
- auth.ahmza.com - auth.ahmza.com
worker: worker:
# Workers run scheduled jobs, source synchronization, and other background # One worker handles scheduled jobs, source synchronization, email, and
# tasks. Keep them off while the original VM remains authoritative. # management of Kubernetes-native outposts.
replicas: 0 replicas: 1
securityContext: securityContext:
runAsNonRoot: true runAsNonRoot: true
runAsUser: 1000 runAsUser: 1000