feat(k8s/services/authentik): add pvc

k8s/argo-apps/authentik.yaml

@@ -8,8 +8,8 @@ spec:
     name: ''
     namespace: 'apps-fuku'
     server: "https://kubernetes.default.svc"
-  source:
-    chart: authentik
+  sources:
+    - chart: authentik
       repoURL: https://charts.goauthentik.io/
       targetRevision: 2023.10.*
       helm:
@@ -37,10 +37,15 @@ spec:
           volumeMounts:
             - name: authentik-creds
               mountPath: /authentik-creds
+            - name: media
+              mountPath: /media
           volumes:
             - name: authentik-creds
               secret:
                 secretName: secrets-authentik
+            - name: media
+              persistentVolumeClaim:
+                claimName: pvc-authentik-media
           autoscaling:
             server:
               enabled: true
@@ -71,7 +76,9 @@ spec:
                         name: authentik
                         port:
                           number: 9000
+    - repoURL: https://git.roboces.dev/catalin/fukuops.git
+      path: k8s/services/authentik
+      targetRevision: main
   project: fuku
-  sources: []
   syncPolicy:
     automated: { }

k8s/services/authentik/pvc.yaml

@@ -0,0 +1,12 @@
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: pvc-authentik-media
+  namespace: apps-fuku
+spec:
+  accessModes:
+    - ReadWriteMany
+  storageClassName: "truenas-nfs-csi"
+  resources:
+    requests:
+      storage: 3Gi