Merge branch 'main' into fix-kanidm-replication-config

Reviewed-on: #179

apps/base/kanidm/resources/server-0.toml

@@ -17,4 +17,3 @@ versions = 7
 [replication]
 origin = "repl://kanidm-0.kanidm-headless.kanidm.svc.cluster.local:8444"
 bindaddress = "[::]:8444"
-automatic_refresh = true

apps/base/kanidm/resources/server-1.toml

@@ -17,4 +17,3 @@ versions = 7
 [replication]
 origin = "repl://kanidm-1.kanidm-headless.kanidm.svc.cluster.local:8444"
 bindaddress = "[::]:8444"
-automatic_refresh = true

apps/base/kanidm/resources/server-2.toml

@@ -17,4 +17,3 @@ versions = 7
 [replication]
 origin = "repl://kanidm-2.kanidm-headless.kanidm.svc.cluster.local:8444"
 bindaddress = "[::]:8444"
-automatic_refresh = true

apps/base/kanidm/vaultauth.yaml

@@ -4,18 +4,15 @@ kind: VaultAuth
 metadata:
   name: default
   namespace: kanidm
-  labels:
-    app.kubernetes.io/name: kanidm
-    app.kubernetes.io/instance: kanidm
 spec:
-  method: kubernetes
-  mount: k8s/au/syd1
-  vaultConnectionRef: vso-system/default
   allowedNamespaces:
     - kanidm
   kubernetes:
-    role: default
-    serviceAccount: kanidm
     audiences:
       - vault
+    role: default
+    serviceAccount: default
     tokenExpirationSeconds: 600
+  method: kubernetes
+  mount: k8s/au/syd1
+  vaultConnectionRef: vso-system/default