riotpiao-poimen/homelab
2
0
Fork 0
Code Issues 23 Pull Requests Actions Packages Projects 1 Releases Wiki Activity
560 Commits 39 Branches 0 Tags
15a22abb1f076c69860ec627834e0942c275da54
Commit Graph
3 Commits
Author SHA1 Message Date
rock e599c12f91 chore(iam): retire the minio OIDC credential from sops 
storage/minio-oidc is owned by the KeyRotation object iam/minio now, so its value
leaves git. minio-creds and minio-user-ollama stay: they are the root console
credential and an application key, and neither rotates through ZITADEL yet.

The file keeps a header that says so, because a prune of the sops-secrets application
would delete that Secret and the controller recreates it on the next rotation.
 2026-10-27 20:00:15 -07:00
rock a02bee50e2 feat(iam): wire all 9 consumer manifests to Zitadel OIDC 
Co-authored-by: rock <[email protected]>
 2026-10-26 04:34:51 +00:00
Story Crater Bot 8ff3060ff0 refactor(argocd): replace SOPS CMP with ksops kustomize generator, rotate age key — CMP discover glob silently shadowed kustomize rendering of any app whose path held a .enc.yaml (MinIO Tenant/cloudflared/authentik jobs never applied); centralize 8 Secret manifests under k8s/argocd/secrets, defer 4 helm-values fragments 2026-08-18 15:08:04 -07:00