unkin-agent af1f77618d Use the browser-trusted Authentik host for the artifactapi OIDC issuer ...

The authorize step is a browser redirect, so the issuer must present a
publicly-trusted cert; identity.k8s.syd1.au.unkin.net serves an internal-CA
cert that no user's browser trusts.

- Point OAUTH2_PROXY_OIDC_ISSUER_URL at identity.unkin.net
- Drop the combine-certs initContainer, its volumes/mounts and
  PROVIDER_CA_FILES: the pod's only other upstream is plain-HTTP in-cluster

2026-09-07 14:14:31 +10:00

..

base

Use the browser-trusted Authentik host for the artifactapi OIDC issuer

2026-09-07 14:14:31 +10:00

overlays/au-syd1

Deploy repospawner v0.1.0 (#445)

2026-08-30 15:40:06 +10:00