unkin-agent 8f7b9360ad Put the artifactapi web UI behind Authentik oauth2-proxy ...

Front /ui with an Authentik-authenticated oauth2-proxy while leaving every
package-manager surface unauthenticated.

- Add the oauth2-proxy ConfigMap, Deployment, Service and VMPodScrape.
- Add the oauth-credentials VaultStaticSecret.
- Split httproute: /ui and /oauth2 to oauth2-proxy (HTTPS, plus an HTTP
  redirect); everything else to the api Service on both listeners.

2026-09-07 14:02:18 +10:00

..

base

Put the artifactapi web UI behind Authentik oauth2-proxy

2026-09-07 14:02:18 +10:00

overlays/au-syd1

Deploy repospawner v0.1.0 (#445)

2026-08-30 15:40:06 +10:00