unkin/argocd-apps
2
0
Fork 0
Code Issues 2 Pull Requests 2 Actions Packages Projects Releases Wiki Activity

feat(kanidm): vault-managed replication certs with auto-restart #176

Merged
unkinben merged 2 commits from benvin/kanidm-vault-repl into main 2026-05-30 23:00:46 +10:00
Conversation 0 Commits 2 Files Changed 8
+102 -43

2 Commits

Author SHA1 Message Date
unkinben ec9f2b51cd Merge branch 'main' into benvin/kanidm-vault-repl
ci/woodpecker/pr/pre-commit Pipeline was successful
Details
ci/woodpecker/pr/kubeconform Pipeline was successful
Details
2026-05-30 22:55:31 +10:00
unkinben db7f8f63a3 feat(kanidm): vault-managed replication certs with auto-restart
ci/woodpecker/pr/kubeconform Pipeline is pending
Details
ci/woodpecker/pr/pre-commit Pipeline is pending
Details 
- Store per-pod replication certs in Vault (kv/kubernetes/namespace/kanidm/default/repl-certs)
- VaultAuth + VaultStaticSecret sync certs to kanidm-repl-certs Secret
- busybox config-init init container injects peer certs from Secret into server.toml at startup
- Remove hardcoded partner_cert entries from per-pod server.toml templates
- Add automatic_refresh = true to all replication configs
- Add reloader.stakater.com/auto annotation to trigger rolling restart on ConfigMap/Secret changes
- Document domain UUID mismatch resolution and cert rotation in README
 2026-05-30 22:53:38 +10:00