Replace upstream docker.io/library/redis:7-alpine with a nix-built container using Redis 8.2.3 from nixpkgs. Introduces the attached service pattern: parent field in service-versions.yaml, naming convention (<parent>-<component>), and version assertion in default.nix to prevent silent version drift on flake.lock updates. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
19 lines
507 B
YAML
19 lines
507 B
YAML
---
|
|
apiVersion: kustomize.config.k8s.io/v1beta1
|
|
kind: Kustomization
|
|
namespace: authentik
|
|
resources:
|
|
- external-secret.yaml
|
|
- configmap-blueprint.yaml
|
|
- deployment-server.yaml
|
|
- deployment-worker.yaml
|
|
- deployment-redis.yaml
|
|
- service.yaml
|
|
- service-redis.yaml
|
|
- ingress-tailscale.yaml
|
|
images:
|
|
- name: registry.ops.eblu.me/blumeops/authentik
|
|
newTag: v2026.2.0-2d4098e-nix
|
|
- name: docker.io/library/redis
|
|
newName: registry.ops.eblu.me/blumeops/authentik-redis
|
|
newTag: 7-alpine
|