viktor/infra
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

authentik/pgbouncer: image_pull_policy IfNotPresent -> Always (match live)

Browse source 
The HCL declared `IfNotPresent` since module creation but the live
deployment reconciled to `Always` somewhere along the way (likely a
Helm/operator default). Since the image is `:latest`, `Always` is the
correct value — `IfNotPresent` would skip pulling updated images on
pod restart, defeating the point of the floating tag.

Drops the lone remaining drift in the authentik stack so plan-to-zero
holds across the whole stack, not just the resources I just adopted.
This commit is contained in:
Viktor Barzin 2026-05-10 16:22:24 +00:00
parent 24795ec203
commit 1fcf911269
1 changed files with 7 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

10
stacks/authentik/modules/authentik/pgbouncer.tf
View file

@ -66,9 +66,13 @@ resource "kubernetes_deployment" "pgbouncer" {
}
}
container {
name = "pgbouncer"
image = "edoburu/pgbouncer:latest"
image_pull_policy = "IfNotPresent"
name = "pgbouncer"
image = "edoburu/pgbouncer:latest"
# `:latest` tag — keep `Always` so pod restarts pick up upstream
# updates. The previous `IfNotPresent` value was declared at module
# creation but the live cluster has reconciled to `Always` (likely
# via a Helm/operator default). Match reality to drop the drift.
image_pull_policy = "Always"
port {
container_port = 6432