grafana: stop pinning the internal CA for Authentik OAuth #440

Merged

benvin merged 1 commits from benvin/grafana-oauth-le-trust into main

2026-08-29 21:52:30 +10:00

Author	SHA1	Message	Date
unkin-agent	82aef12586	grafana: stop pinning the internal CA for Authentik OAuth ci/woodpecker/pr/vector-test Pipeline was successful Details ci/woodpecker/pr/pre-commit Pipeline was successful Details ci/woodpecker/pr/kubeconform Pipeline was successful Details identity.unkin.net now serves the LetsEncrypt *.unkin.net wildcard, so tls_client_ca pointing at the internal unkin.net root is the only trust anchor Grafana offers generic_oauth and the handshake fails. Drop the setting and the now-unused vault-ca-cert mount; the image's public roots cover it.	2026-08-29 21:27:51 +10:00