 Story Crater Bot
|
6e32544fd2
|
fix(authentik): label argocd oidc-secret part-of=argocd — argocd's $secret substitution only reads labelled Secrets; without it OIDC login failed with oauth2 invalid_client (empty client_secret to IdP)
|
2026-08-13 08:56:37 -07:00 |
|
|
Story Crater Bot
|
9f9fe2cf61
|
fix(authentik): add minio policy scope mapping (homelab-admins->consoleAdmin else readonly) + set rock email — MinIO CLAIM_NAME=policy got no claim (no MinIO access); empty rock email broke Grafana OIDC (GitHub-style /emails 404)
|
2026-08-12 20:31:13 -07:00 |
|
|
Story Crater Bot
|
e6f2ab1423
|
refactor(k8s): consolidate to infra/+apps/ single-source tree, dedicated per-app CNPG (authentik-db/temporal-db), wire monitoring-config, forgejo→cicd ns, drop orphan/stale (data-schemas, ollama, story-crater, sqs/argocd, key-rotation)
|
2026-07-23 20:54:02 -07:00 |
|