unkinben 5380a9fbf4 Wire LiteLLM SSO to Authentik (generic OIDC) ...

App-side of the LiteLLM Authentik onboarding (terraform-authentik#8). Configures
LiteLLM's generic OIDC SSO against Authentik.

- VaultStaticSecret oauth-credentials: surfaces the OIDC client secret (same
  secret Authentik sets on the provider) as a k8s Secret.
- Deployment: GENERIC_CLIENT_SECRET from that Secret.
- litellm-env: GENERIC_CLIENT_ID, authorization/token/userinfo endpoints, scope,
  and PROXY_BASE_URL (required for SSO). reloader restarts on secret/config change.

2026-07-19 18:27:31 +10:00

.claude/commands

chore: bump almalinux9 image tags (#188)

2026-06-07 00:35:12 +10:00

.woodpecker

chore: bump almalinux9 image tags (#188)

2026-06-07 00:35:12 +10:00

apps

Wire LiteLLM SSO to Authentik (generic OIDC)

2026-07-19 18:27:31 +10:00

argocd

Deploy cephrgw-operator to cephrgw-system (#261)

2026-07-18 14:32:11 +10:00

ci

Add JSON schema generation for kubeconform CRD validation (#212)

2026-06-28 17:26:08 +10:00

clusters/au-syd1

Wire ArgoCD RBAC to Authentik ak_groups / akP-argocd-admin (#263)

2026-07-18 16:23:58 +10:00

schemas

Bump bind-operator to v0.2.0 and deploy companion TSIG API (#249)

2026-07-12 19:12:39 +10:00

.gitignore

feat: add reloader (#6)

2026-03-01 16:34:01 +11:00

.pre-commit-config.yaml

Add JSON schema generation for kubeconform CRD validation (#212)

2026-06-28 17:26:08 +10:00

.yamllint.yaml

feat: add pre-commit configuration (#9)

2026-03-02 00:09:21 +11:00

AGENTS.md

chore: bump almalinux9 image tags (#188)

2026-06-07 00:35:12 +10:00

Makefile

Add JSON schema generation for kubeconform CRD validation (#212)

2026-06-28 17:26:08 +10:00

migration.md

chore: bump almalinux9 image tags (#188)

2026-06-07 00:35:12 +10:00

S

Description

GitOps for ArgoCD

4.7 MiB

Languages

Shell 88.8%

Makefile 11.2%