The HCL declared `IfNotPresent` since module creation but the live deployment reconciled to `Always` somewhere along the way (likely a Helm/operator default). Since the image is `:latest`, `Always` is the correct value — `IfNotPresent` would skip pulling updated images on pod restart, defeating the point of the floating tag. Drops the lone remaining drift in the authentik stack so plan-to-zero holds across the whole stack, not just the resources I just adopted. |
||
|---|---|---|
| .. | ||
| modules/authentik | ||
| authentik_provider.tf | ||
| main.tf | ||
| secrets | ||
| terragrunt.hcl | ||