The authentik Flux Kustomization runs postBuild substitution in strict mode. freeradius-config contains FreeRADIUS variables (${max_requests}, ${prefix}, …), so the build fails with variable not set (strict mode): "max_requests" and nothing from #1554 is applied.
The ConfigMap gets kustomize.toolkit.fluxcd.io/substitute: disabled, so Flux leaves its content untouched; substitution for the other objects in the Kustomization (e.g. SAMBA_BRIDGE_LDAP_OUTPOST_IMAGE) is unchanged.
The `authentik` Flux Kustomization runs postBuild substitution in strict mode. `freeradius-config` contains FreeRADIUS variables (`${max_requests}`, `${prefix}`, …), so the build fails with `variable not set (strict mode): "max_requests"` and nothing from #1554 is applied.
The ConfigMap gets `kustomize.toolkit.fluxcd.io/substitute: disabled`, so Flux leaves its content untouched; substitution for the other objects in the Kustomization (e.g. `SAMBA_BRIDGE_LDAP_OUTPOST_IMAGE`) is unchanged.
`flux build kustomization authentik --path ./kubernetes/apps/authentik --strict-substitute` succeeds and renders `${max_requests}` / `${prefix}` verbatim.
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
The
authentikFlux Kustomization runs postBuild substitution in strict mode.freeradius-configcontains FreeRADIUS variables (${max_requests},${prefix}, …), so the build fails withvariable not set (strict mode): "max_requests"and nothing from #1554 is applied.The ConfigMap gets
kustomize.toolkit.fluxcd.io/substitute: disabled, so Flux leaves its content untouched; substitution for the other objects in the Kustomization (e.g.SAMBA_BRIDGE_LDAP_OUTPOST_IMAGE) is unchanged.flux build kustomization authentik --path ./kubernetes/apps/authentik --strict-substitutesucceeds and renders${max_requests}/${prefix}verbatim.🤖 Generated with Claude Code