fix: remove broken auth annotations from obsidian ingress

Bearer auth-url was misconfigured (pointed to token endpoint, not
forward-auth). No Authentik outpost deployed yet. Remove for now,
vault.riotpiao.com accessible directly. TODO: add forward-auth
once outpost is set up.
This commit is contained in:
2026-08-28 16:42:00 -07:00
parent b94898d0d4
commit 2ddd2d6cdf
+3 -2
View File
@@ -155,8 +155,9 @@ metadata:
namespace: poimen namespace: poimen
annotations: annotations:
cert-manager.io/cluster-issuer: letsencrypt-prod cert-manager.io/cluster-issuer: letsencrypt-prod
nginx.ingress.kubernetes.io/auth-type: bearer # TODO: Add Authentik forward-auth once outpost is deployed
nginx.ingress.kubernetes.io/auth-url: http://authentik-server.iam.svc.cluster.local/application/o/oauth2/token/ # nginx.ingress.kubernetes.io/auth-url: https://<outpost>/outpost.goauthentik.io/auth/nginx
# nginx.ingress.kubernetes.io/auth-signin: https://authentik.riotpiao.com/outpost.goauthentik.io/start?rd=$scheme://$host$request_uri
spec: spec:
ingressClassName: nginx ingressClassName: nginx
tls: tls: