25 Commits

Author SHA1 Message Date
ee1fd7f458 vault: default oidc claims type 2026-01-15 02:20:53 -03:00
d82146cfd6 vault: harden oidc claims type 2026-01-15 02:18:50 -03:00
a4d20efe7d vault: allow oidc tuning 2026-01-15 02:16:55 -03:00
2b934d4263 vault: use static token reviewer 2026-01-15 02:14:08 -03:00
53c4faf2f7 vault: add admin role for config jobs 2026-01-15 02:06:28 -03:00
1eab80648d vault: finalize sidecar migration 2026-01-15 01:52:24 -03:00
d957e7e7f7 vault: read oidc config from vault 2026-01-14 23:20:04 -03:00
fb05c442f5 longhorn: read oauth2-proxy secrets from vault 2026-01-14 17:48:12 -03:00
4f99000aab vault: inject remaining services with wrappers 2026-01-14 17:29:09 -03:00
4279db1619 vault: stabilize injector templates and add health apps 2026-01-14 13:40:29 -03:00
c9483b2d80 vault: sync harbor pulls 2026-01-14 10:07:31 -03:00
e897858d97 monitoring: move grafana smtp to vault 2026-01-14 06:41:34 -03:00
c24c7284e5 vault: add remaining secret syncs 2026-01-14 06:16:42 -03:00
bdc32b7a36 vault(consumption): sync secrets via CSI 2026-01-14 05:07:23 -03:00
58a9eb8a35 vault: send oidc role payload as json 2026-01-14 03:45:03 -03:00
3bcf04f754 vault: write bound_claims as file 2026-01-14 02:56:29 -03:00
3c65695dfc vault: wire more services to CSI 2026-01-14 02:54:59 -03:00
7d884b2bc8 vault: fix oidc scopes parsing 2026-01-14 02:52:51 -03:00
ca0c618f82 vault: run oidc config with sh 2026-01-14 02:28:38 -03:00
0d9291da7e vault: align oidc roles with keycloak 2026-01-14 02:24:32 -03:00
8567cfbee2 fix: detect vault initialized state correctly 2026-01-14 01:42:28 -03:00
ed7ff3b810 fix: make vault k8s auth script posix 2026-01-14 01:38:27 -03:00
c096b35078 fix: run vault k8s auth config with sh 2026-01-14 01:35:06 -03:00
5d53d900aa feat: start vault consumption for outline and planka 2026-01-14 01:30:41 -03:00
ac1389b75b feat: add harbor/vault oidc automation 2026-01-14 01:07:47 -03:00