From 51bc1a84baf1cd2b907c7c709aacb48cac9d774e Mon Sep 17 00:00:00 2001
From: Zoe Roux <zoe.roux@zoriya.dev>
Date: Fri, 18 Jul 2025 09:27:36 +0200
Subject: [PATCH] Add postgres root ca to authentik

---
 apps/authentik.yaml | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/apps/authentik.yaml b/apps/authentik.yaml
index 5727d5a..bcfda28 100644
--- a/apps/authentik.yaml
+++ b/apps/authentik.yaml
@@ -33,14 +33,25 @@ spec:
               value: /var/postgres-ssl/tls.crt
             - name: AUTHENTIK_POSTGRESQL__SSLKEY
               value: /var/postgres-ssl/tls.key
+            - name: AUTHENTIK_POSTGRESQL__SSLROOTCERT
+              value: /var/postgres-ca/ca.crt
           volumeMounts:
             - name: postgres-cert
               mountPath: /var/postgres-ssl
+            - name: postgres-cert
+              mountPath: /var/postgres-ca
           volumes:
             - name: postgres-cert
               secret:
                 defaultMode: 0640
                 secretName: postgres-authentik
+            - name: postgres-root
+              secret:
+                defaultMode: 0640
+                secretName: postgres-ca
+                items:
+                  - key: ca.crt
+                    path: ca.crt
           securityContext:
             fsGroup: 1001
             runAsUser: 1001