unkin-agent af1f77618d Use the browser-trusted Authentik host for the artifactapi OIDC issuer ...

The authorize step is a browser redirect, so the issuer must present a
publicly-trusted cert; identity.k8s.syd1.au.unkin.net serves an internal-CA
cert that no user's browser trusts.

- Point OAUTH2_PROXY_OIDC_ISSUER_URL at identity.unkin.net
- Drop the combine-certs initContainer, its volumes/mounts and
  PROVIDER_CA_FILES: the pod's only other upstream is plain-HTTP in-cluster

2026-09-07 14:14:31 +10:00

..

api-deployment.yaml

Bump artifactapi to v3.11.2 (#453)

2026-09-05 16:04:58 +10:00

api-hpa.yaml

feat: migrate to artifactapi 3+ (#197)

2026-06-26 22:18:07 +10:00

cnpg_backup.yaml

cephrgw: recreate cnpg backup buckets on ec placement (step 3) (#316)

2026-07-30 23:44:50 +10:00

cnpg_cluster.yaml

Add S3 backups to all CNPG Postgres clusters (#298)

2026-07-27 23:57:08 +10:00

cnpg_pooler.yaml

feat: migrate to artifactapi 3+ (#197)

2026-06-26 22:18:07 +10:00

configmap.yaml

feat: artifactapi route change (#198)

2026-06-26 22:50:27 +10:00

gateway.yaml

fix(gateways): add explicit group: "" to all certificateRefs entries (#153)

2026-05-23 23:47:24 +10:00

httproute.yaml

Keep the artifactapi UI/API split inside one HTTPRoute

2026-09-07 14:07:44 +10:00

kustomization.yaml

Put the artifactapi web UI behind Authentik oauth2-proxy

2026-09-07 14:02:18 +10:00

namespace.yaml

chore: migrate artifactapi to kustomize (#18)

2026-03-06 21:35:47 +11:00

oauth2-proxy-configmap.yaml

Use the browser-trusted Authentik host for the artifactapi OIDC issuer

2026-09-07 14:14:31 +10:00

oauth2-proxy-deployment.yaml

Use the browser-trusted Authentik host for the artifactapi OIDC issuer

2026-09-07 14:14:31 +10:00

redis-deployment.yaml

artifactapi: use canonical upstream image name for redis_exporter (#429)

2026-08-29 21:18:27 +10:00

services.yaml

Correct the oauth2 Service comment to name api-route

2026-09-07 14:07:58 +10:00

ui-deployment.yaml

Bump artifactapi to v3.11.2 (#453)

2026-09-05 16:04:58 +10:00

ui-hpa.yaml

feat: migrate to artifactapi 3+ (#197)

2026-06-26 22:18:07 +10:00

vaultauth.yaml

feat: artifactapi route change (#198)

2026-06-26 22:50:27 +10:00

vaultstaticsecret.yaml

Put the artifactapi web UI behind Authentik oauth2-proxy

2026-09-07 14:02:18 +10:00

vmpodscrape.yaml

Put the artifactapi web UI behind Authentik oauth2-proxy

2026-09-07 14:02:18 +10:00

vpa.yaml

Add advise-mode VPA for every workload (#283)

2026-07-25 18:30:23 +10:00