From 6c13aec9c1b07f775f3b7498291b8f056b8ed8a5 Mon Sep 17 00:00:00 2001
From: AB-UK <ab@hexor.cy>
Date: Wed, 6 May 2026 10:13:27 +0100
Subject: [PATCH] Disable authentik CI

---
 .gitea/workflows/authentik-apps.yaml       |  1 +
 terraform/authentik/proxy-apps.auto.tfvars | 17 -----------------
 2 files changed, 1 insertion(+), 17 deletions(-)

diff --git a/.gitea/workflows/authentik-apps.yaml b/.gitea/workflows/authentik-apps.yaml
index 9da6615..3bbbb89 100644
--- a/.gitea/workflows/authentik-apps.yaml
+++ b/.gitea/workflows/authentik-apps.yaml
@@ -13,6 +13,7 @@ permissions:
 jobs:
   terraform:
     name: 'Terraform'
+    if: false
     runs-on: ubuntu-latest
     environment: production
 
diff --git a/terraform/authentik/proxy-apps.auto.tfvars b/terraform/authentik/proxy-apps.auto.tfvars
index 0d633ca..aac1fb9 100644
--- a/terraform/authentik/proxy-apps.auto.tfvars
+++ b/terraform/authentik/proxy-apps.auto.tfvars
@@ -43,23 +43,6 @@ proxy_applications = {
     access_groups                = ["admins"]
   }
 
-  "kubernetes-secrets" = {
-    name                         = "kubernetes-secrets"
-    slug                         = "k8s-secret"
-    group                        = "Core"
-    external_host                = "https://pass.hexor.cy"
-    internal_host                = "http://secret-reader.k8s-secret.svc:80"
-    internal_host_ssl_validation = false
-    meta_description             = ""
-    skip_path_regex              = <<-EOT
-/webhook
-EOT
-    meta_icon                    = "https://img.icons8.com/ios-filled/50/password.png"
-    mode                         = "proxy"
-    outpost                      = "kubernetes-outpost"
-    create_group                 = true
-    access_groups                = ["admins"]
-  }
   "mtproxy-links" = {
     name                         = "mtproxy-links"
     slug                         = "mtproxy-links"