2025-12-02 17:46:52 -03:00
|
|
|
# services/keycloak/kustomization.yaml
|
|
|
|
|
apiVersion: kustomize.config.k8s.io/v1beta1
|
|
|
|
|
kind: Kustomization
|
|
|
|
|
namespace: sso
|
|
|
|
|
resources:
|
|
|
|
|
- namespace.yaml
|
|
|
|
|
- pvc.yaml
|
2026-01-14 02:54:59 -03:00
|
|
|
- serviceaccount.yaml
|
2026-01-14 10:07:31 -03:00
|
|
|
- vault-serviceaccount.yaml
|
2026-01-14 02:54:59 -03:00
|
|
|
- secretproviderclass.yaml
|
2026-01-14 10:07:31 -03:00
|
|
|
- vault-sync-deployment.yaml
|
2025-12-02 17:46:52 -03:00
|
|
|
- deployment.yaml
|
refactor: restructure services layout, retire oceanus, add aether scaffolding
- Move flat service manifests into structured subdirs (apps/, bootstrap-jobs/,
repair-jobs/, migration-jobs/, validation-jobs/, node-ops/, networking/)
- Retire oneoffs/ directories across services
- Remove oceanus cluster and its host roles; add aether cluster + terraform scaffolding
- Reorganize scripts/ into ops/, render/, sync/, manual-tests/
- Add Makefile with render/validate/test/flux targets and repo-structure tests
- Update flux-system application CRs to the new paths
- Add hermes-automated-triage-24h-plan knowledge doc (+ comms mirror)
- Refresh knowledge catalogs, dashboards, vmalert rules, quality contract
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-08-05 16:21:36 -03:00
|
|
|
- bootstrap-jobs/realm-settings-job.yaml
|
|
|
|
|
- bootstrap-jobs/portal-admin-client-secret-ensure-job.yaml
|
|
|
|
|
- bootstrap-jobs/portal-groups-scope-ensure-job.yaml
|
|
|
|
|
- validation-jobs/portal-e2e-client-job.yaml
|
|
|
|
|
- validation-jobs/portal-e2e-target-client-job.yaml
|
|
|
|
|
- validation-jobs/portal-e2e-token-exchange-permissions-job.yaml
|
|
|
|
|
- validation-jobs/portal-e2e-token-exchange-test-job.yaml
|
|
|
|
|
- validation-jobs/portal-e2e-execute-actions-email-test-job.yaml
|
|
|
|
|
- bootstrap-jobs/ldap-federation-job.yaml
|
|
|
|
|
- bootstrap-jobs/user-overrides-job.yaml
|
|
|
|
|
- bootstrap-jobs/mas-secrets-ensure-job.yaml
|
|
|
|
|
- bootstrap-jobs/synapse-oidc-secret-ensure-job.yaml
|
|
|
|
|
- bootstrap-jobs/logs-oidc-secret-ensure-job.yaml
|
|
|
|
|
- bootstrap-jobs/metis-oidc-secret-ensure-job.yaml
|
|
|
|
|
- bootstrap-jobs/soteria-oidc-secret-ensure-job.yaml
|
|
|
|
|
- bootstrap-jobs/quality-oidc-secret-ensure-job.yaml
|
|
|
|
|
- bootstrap-jobs/hermes-dashboard-oidc-client-job.yaml
|
2026-08-05 16:26:36 -03:00
|
|
|
- bootstrap-jobs/hermes-access-oidc-client-job.yaml
|
refactor: restructure services layout, retire oceanus, add aether scaffolding
- Move flat service manifests into structured subdirs (apps/, bootstrap-jobs/,
repair-jobs/, migration-jobs/, validation-jobs/, node-ops/, networking/)
- Retire oneoffs/ directories across services
- Remove oceanus cluster and its host roles; add aether cluster + terraform scaffolding
- Reorganize scripts/ into ops/, render/, sync/, manual-tests/
- Add Makefile with render/validate/test/flux targets and repo-structure tests
- Update flux-system application CRs to the new paths
- Add hermes-automated-triage-24h-plan knowledge doc (+ comms mirror)
- Refresh knowledge catalogs, dashboards, vmalert rules, quality contract
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-08-05 16:21:36 -03:00
|
|
|
- bootstrap-jobs/veles-realm-ensure-job.yaml
|
|
|
|
|
- bootstrap-jobs/veles-gitea-oidc-secret-ensure-job.yaml
|
|
|
|
|
- bootstrap-jobs/metis-ssh-keys-secret-ensure-job.yaml
|
|
|
|
|
- bootstrap-jobs/metis-node-passwords-secret-ensure-job.yaml
|
|
|
|
|
- bootstrap-jobs/harbor-oidc-secret-ensure-job.yaml
|
|
|
|
|
- bootstrap-jobs/vault-oidc-secret-ensure-job.yaml
|
|
|
|
|
- bootstrap-jobs/actual-oidc-secret-ensure-job.yaml
|
2025-12-02 17:46:52 -03:00
|
|
|
- service.yaml
|
|
|
|
|
- ingress.yaml
|
2026-01-03 15:58:44 -03:00
|
|
|
generatorOptions:
|
|
|
|
|
disableNameSuffixHash: true
|
|
|
|
|
configMapGenerator:
|
|
|
|
|
- name: portal-e2e-tests
|
|
|
|
|
files:
|
2026-01-13 12:07:03 -03:00
|
|
|
- test_portal_token_exchange.py=scripts/tests/test_portal_token_exchange.py
|
|
|
|
|
- test_keycloak_execute_actions_email.py=scripts/tests/test_keycloak_execute_actions_email.py
|
2026-01-14 01:21:08 -03:00
|
|
|
- name: harbor-oidc-secret-ensure-script
|
|
|
|
|
files:
|
|
|
|
|
- harbor_oidc_secret_ensure.sh=scripts/harbor_oidc_secret_ensure.sh
|
2026-01-14 02:24:32 -03:00
|
|
|
- name: vault-oidc-secret-ensure-script
|
|
|
|
|
files:
|
|
|
|
|
- vault_oidc_secret_ensure.sh=scripts/vault_oidc_secret_ensure.sh
|
2026-01-16 23:52:56 -03:00
|
|
|
- name: actual-oidc-secret-ensure-script
|
|
|
|
|
files:
|
|
|
|
|
- actual_oidc_secret_ensure.sh=scripts/actual_oidc_secret_ensure.sh
|
2026-07-21 21:02:06 -03:00
|
|
|
- name: hermes-dashboard-oidc-client-script
|
2026-05-20 17:22:12 -03:00
|
|
|
files:
|
2026-07-21 21:02:06 -03:00
|
|
|
- hermes_dashboard_oidc_client_ensure.sh=scripts/hermes_dashboard_oidc_client_ensure.sh
|
2026-08-02 02:30:44 -03:00
|
|
|
- name: hermes-access-oidc-script
|
refactor: restructure services layout, retire oceanus, add aether scaffolding
- Move flat service manifests into structured subdirs (apps/, bootstrap-jobs/,
repair-jobs/, migration-jobs/, validation-jobs/, node-ops/, networking/)
- Retire oneoffs/ directories across services
- Remove oceanus cluster and its host roles; add aether cluster + terraform scaffolding
- Reorganize scripts/ into ops/, render/, sync/, manual-tests/
- Add Makefile with render/validate/test/flux targets and repo-structure tests
- Update flux-system application CRs to the new paths
- Add hermes-automated-triage-24h-plan knowledge doc (+ comms mirror)
- Refresh knowledge catalogs, dashboards, vmalert rules, quality contract
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-08-05 16:21:36 -03:00
|
|
|
files:
|
2026-08-02 02:30:44 -03:00
|
|
|
- hermes_access_oidc_ensure.sh=scripts/hermes_access_oidc_ensure.sh
|
2026-06-20 14:08:18 -03:00
|
|
|
- name: veles-gitea-oidc-secret-ensure-script
|
|
|
|
|
files:
|
|
|
|
|
- veles_gitea_oidc_secret_ensure.sh=scripts/veles_gitea_oidc_secret_ensure.sh
|
