From 22fd0f8e54e0335321926dfb56a4836730fd5a46 Mon Sep 17 00:00:00 2001
From: Claude Bot <claude-bot@renner.uno>
Date: Wed, 4 Nov 2026 08:51:56 +0100
Subject: [PATCH] fix(radius): skip Flux substitution on the FreeRADIUS config

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
---
 kubernetes/apps/authentik/freeradius-config.yaml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/kubernetes/apps/authentik/freeradius-config.yaml b/kubernetes/apps/authentik/freeradius-config.yaml
index 6ef47a6c..97266375 100644
--- a/kubernetes/apps/authentik/freeradius-config.yaml
+++ b/kubernetes/apps/authentik/freeradius-config.yaml
@@ -7,6 +7,9 @@ kind: ConfigMap
 metadata:
   name: freeradius-config
   namespace: authentik
+  annotations:
+    # FreeRADIUS uses ${...} itself; Flux postBuild substitution must skip it.
+    kustomize.toolkit.fluxcd.io/substitute: disabled
 data:
   radiusd.conf: |
     prefix = /opt
-- 
2.54.0