unkin-agent 8a1d544393 Enable Vault OIDC auth on artifactapi config writes (#552) ...

artifactapi v3.14.0 can require a Vault-issued bearer JWT for writes to /api/v2/remotes and /api/v2/virtuals, so config changes stop being open to anything in-cluster.

- bump artifactapi and artifactapi-ui images to v3.14.0
- set ARTIFACTAPI_OIDC_ISSUER to the Vault identity OIDC issuer and ARTIFACTAPI_OIDC_AUDIENCE to artifactapi

Requires terraform-artifactapi #64 merged first.

Reviewed-on: #552
Co-authored-by: unkin-agent <unkin-agent@unkin.net>
Co-committed-by: unkin-agent <unkin-agent@unkin.net>

2026-10-16 22:23:54 +11:00

..

api-deployment.yaml

Enable Vault OIDC auth on artifactapi config writes (#552)

2026-10-16 22:23:54 +11:00

api-hpa.yaml

feat: migrate to artifactapi 3+ (#197)

2026-06-26 22:18:07 +10:00

cnpg_backup.yaml

cephrgw: recreate cnpg backup buckets on ec placement (step 3) (#316)

2026-07-30 23:44:50 +10:00

cnpg_cluster.yaml

Add S3 backups to all CNPG Postgres clusters (#298)

2026-07-27 23:57:08 +10:00

cnpg_pooler.yaml

feat: migrate to artifactapi 3+ (#197)

2026-06-26 22:18:07 +10:00

configmap.yaml

Enable Vault OIDC auth on artifactapi config writes (#552)

2026-10-16 22:23:54 +11:00

gateway.yaml

fix(gateways): add explicit group: "" to all certificateRefs entries (#153)

2026-05-23 23:47:24 +10:00

httproute.yaml

Put the artifactapi web UI behind Authentik oauth2-proxy (#456)

2026-09-07 21:01:17 +10:00

image-keeper.yaml

Enable Vault OIDC auth on artifactapi config writes (#552)

2026-10-16 22:23:54 +11:00

kustomization.yaml

add artifactapi image-keeper daemonset (#535)

2026-10-10 01:06:10 +11:00

namespace.yaml

chore: migrate artifactapi to kustomize (#18)

2026-03-06 21:35:47 +11:00

oauth2-proxy-configmap.yaml

artifactapi: restore combine-certs + PROVIDER_CA_FILES on oauth2-proxy (#458)

2026-09-07 23:05:39 +10:00

oauth2-proxy-deployment.yaml

artifactapi: restore combine-certs + PROVIDER_CA_FILES on oauth2-proxy (#458)

2026-09-07 23:05:39 +10:00

redis-deployment.yaml

artifactapi: use canonical upstream image name for redis_exporter (#429)

2026-08-29 21:18:27 +10:00

services.yaml

Put the artifactapi web UI behind Authentik oauth2-proxy (#456)

2026-09-07 21:01:17 +10:00

ui-deployment.yaml

Enable Vault OIDC auth on artifactapi config writes (#552)

2026-10-16 22:23:54 +11:00

ui-hpa.yaml

feat: migrate to artifactapi 3+ (#197)

2026-06-26 22:18:07 +10:00

vaultauth.yaml

feat: artifactapi route change (#198)

2026-06-26 22:50:27 +10:00

vaultstaticsecret.yaml

Put the artifactapi web UI behind Authentik oauth2-proxy (#456)

2026-09-07 21:01:17 +10:00

vmpodscrape.yaml

Put the artifactapi web UI behind Authentik oauth2-proxy (#456)

2026-09-07 21:01:17 +10:00

vpa.yaml

Add advise-mode VPA for every workload (#283)

2026-07-25 18:30:23 +10:00