Commit Graph
3 Commits
Author SHA1 Message Date
Admin Botandpoimen 136c85ad13 feat(config): add tokenUrl, clientId, clientSecret to auth config
CI / CI (pull_request) Successful in 3m20s
Wire token exchange config for /auth/token and /auth/refresh endpoints.
clientSecret loaded from AUTH_CLIENT_SECRET env var (never from YAML).
Backward compatible — missing fields default to zero values.

3 new tests covering: full config, env-only secret, backward compat.

Closes homelab#12

Co-authored-by: poimen <[email protected]>
2026-09-08 16:25:32 -07:00
Admin Bot c87463c850 fix(s3): correct MinIO service port and allow egress
CI / CI (pull_request) Successful in 3m16s
MinIO ClusterIP service listens on port 80 (targetPort 9000).
Config had port 9000 which caused 30s timeout then 502 — gateway
connected to service port 9000 which doesn't exist on the ClusterIP.

Changes:
- configmap.yaml: S3 upstream :9000 → :80
- gateway-config-secret.enc.yaml: same
- network-policy.yaml: add port 80 egress to storage namespace

Verified: S3 adapter now reaches MinIO (403 AccessDenied = auth issue,
not connectivity).
2026-09-08 09:58:36 -07:00
Admin Bot 11ca4a5902 fix: move gateway config from plaintext ConfigMap to SOPS-encrypted Secret
CI / Build and push image (push) Canceled after 0s
CI / Vet, test, build (push) Canceled after 2m52s
2026-09-05 00:28:45 -07:00