From 2ddd2d6cdf2f3a5a3c94c12bcf651991b60895a8 Mon Sep 17 00:00:00 2001 From: rock Date: Fri, 28 Aug 2026 16:42:00 -0700 Subject: [PATCH] fix: remove broken auth annotations from obsidian ingress Bearer auth-url was misconfigured (pointed to token endpoint, not forward-auth). No Authentik outpost deployed yet. Remove for now, vault.riotpiao.com accessible directly. TODO: add forward-auth once outpost is set up. --- k8s/app/obsidian.yaml | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/k8s/app/obsidian.yaml b/k8s/app/obsidian.yaml index 4037f90..0b96275 100644 --- a/k8s/app/obsidian.yaml +++ b/k8s/app/obsidian.yaml @@ -155,8 +155,9 @@ metadata: namespace: poimen annotations: cert-manager.io/cluster-issuer: letsencrypt-prod - nginx.ingress.kubernetes.io/auth-type: bearer - nginx.ingress.kubernetes.io/auth-url: http://authentik-server.iam.svc.cluster.local/application/o/oauth2/token/ + # TODO: Add Authentik forward-auth once outpost is deployed + # nginx.ingress.kubernetes.io/auth-url: https:///outpost.goauthentik.io/auth/nginx + # nginx.ingress.kubernetes.io/auth-signin: https://authentik.riotpiao.com/outpost.goauthentik.io/start?rd=$scheme://$host$request_uri spec: ingressClassName: nginx tls: