homelab-frontend

94 Commits 1 Branch 2 Tags

3 Commits

Include renames

Author	SHA1	Message	Date
poimenandrock	ddee0f2dc9	feat(config): add tokenUrl, clientId, clientSecret to auth config (#17 ) CI / CI (push) Successful in 3m20s Details Closes homelab#12 (P3.7) ## Changes - `AuthConfig`: added `TokenURL`, `ClientID`, `ClientSecret` fields - `loader.go`: reads `tokenUrl`/`clientId` from YAML, `ClientSecret` from `AUTH_CLIENT_SECRET` env - `deployment.yaml`: `AUTH_CLIENT_SECRET` from `api-gw-client-secret` Secret (optional) - `gateway-config-secret.enc.yaml` + `configmap.yaml`: added `tokenUrl` and `clientId` ## Secret never in YAML `clientSecret` deliberately omitted from YAML struct. Loaded from env only. ## Tests 3 tests: full config load, env-only secret, backward compat (missing fields = zero). Co-authored-by: poimen <[email protected]>	2026-09-08 23:43:29 +00:00
Admin Bot	c87463c850	fix(s3): correct MinIO service port and allow egress CI / CI (pull_request) Successful in 3m16s Details MinIO ClusterIP service listens on port 80 (targetPort 9000). Config had port 9000 which caused 30s timeout then 502 — gateway connected to service port 9000 which doesn't exist on the ClusterIP. Changes: - configmap.yaml: S3 upstream :9000 → :80 - gateway-config-secret.enc.yaml: same - network-policy.yaml: add port 80 egress to storage namespace Verified: S3 adapter now reaches MinIO (403 AccessDenied = auth issue, not connectivity).	2026-09-08 09:58:36 -07:00
Admin Bot	11ca4a5902	fix: move gateway config from plaintext ConfigMap to SOPS-encrypted Secret CI / Build and push image (push) Canceled after 0s Details CI / Vet, test, build (push) Canceled after 2m52s Details	2026-09-05 00:28:45 -07:00

Author

SHA1

Message

Date

poimenandrock

ddee0f2dc9

feat(config): add tokenUrl, clientId, clientSecret to auth config (#17 )

CI / CI (push) Successful in 3m20s

Details

Closes homelab#12 (P3.7)

## Changes

- `AuthConfig`: added `TokenURL`, `ClientID`, `ClientSecret` fields
- `loader.go`: reads `tokenUrl`/`clientId` from YAML, `ClientSecret` from `AUTH_CLIENT_SECRET` env
- `deployment.yaml`: `AUTH_CLIENT_SECRET` from `api-gw-client-secret` Secret (optional)
- `gateway-config-secret.enc.yaml` + `configmap.yaml`: added `tokenUrl` and `clientId`

## Secret never in YAML

`clientSecret` deliberately omitted from YAML struct. Loaded from env only.

## Tests

3 tests: full config load, env-only secret, backward compat (missing fields = zero).

Co-authored-by: poimen <[email protected]>

2026-09-08 23:43:29 +00:00

Admin Bot

c87463c850

fix(s3): correct MinIO service port and allow egress

CI / CI (pull_request) Successful in 3m16s

Details

MinIO ClusterIP service listens on port 80 (targetPort 9000).
Config had port 9000 which caused 30s timeout then 502 — gateway
connected to service port 9000 which doesn't exist on the ClusterIP.

Changes:
- configmap.yaml: S3 upstream :9000 → :80
- gateway-config-secret.enc.yaml: same
- network-policy.yaml: add port 80 egress to storage namespace

Verified: S3 adapter now reaches MinIO (403 AccessDenied = auth issue,
not connectivity).

2026-09-08 09:58:36 -07:00

Admin Bot

11ca4a5902

fix: move gateway config from plaintext ConfigMap to SOPS-encrypted Secret

CI / Build and push image (push) Canceled after 0s

Details

CI / Vet, test, build (push) Canceled after 2m52s

Details

2026-09-05 00:28:45 -07:00