133 Commits

Author SHA1 Message Date
7171e5a9ea fix: unblock keycloak and refresh glue checks 2026-01-19 22:33:34 -03:00
ff3ed195ac chore: centralize harbor pull credentials 2026-01-19 19:02:14 -03:00
bb41c219f6 feat: add Ariadne service and glue scheduling 2026-01-19 16:58:02 -03:00
435ed5d426 keycloak: bump jobs for postmark change 2026-01-18 09:27:18 -03:00
1fb3d179ef monitoring: add testing dashboard and switch postmark apikey 2026-01-18 09:21:33 -03:00
c9cb088198 keycloak: rerun realm settings job 2026-01-18 01:58:17 -03:00
418d201da0 mailu: gate sync to approved users 2026-01-18 00:47:38 -03:00
268a1d9449 sso: retry mas secret lookup 2026-01-17 03:29:36 -03:00
acfab6a150 sso: retry keycloak secret jobs 2026-01-17 03:24:30 -03:00
7b009caf97 keycloak: bump portal admin secret job 2026-01-17 01:54:15 -03:00
86ea701ff0 jobs: bump names after affinity update 2026-01-17 01:52:16 -03:00
6ec0414fcd jobs: prefer arm64 workers 2026-01-17 01:47:53 -03:00
33e35193fb sso: harden keycloak jobs and rerun 2026-01-17 01:41:39 -03:00
1b4f46bb41 sso: rerun realm settings and vault oidc job 2026-01-17 01:36:48 -03:00
622c7acaa4 jobs: rerun keycloak realm + mas db ensure 2026-01-17 01:11:45 -03:00
a9351bc737 jobs: drop apk installs and prefer arm64 2026-01-17 01:02:58 -03:00
f4c6827c8c keycloak: bump realm settings job 2026-01-17 01:00:12 -03:00
3e3061fe5b finance: add actual budget and firefly 2026-01-16 23:52:56 -03:00
1fb7b27de4 keycloak: rerun realm and user overrides 2026-01-16 17:47:34 -03:00
1eb7d58259 keycloak: enforce bstein group membership 2026-01-16 17:36:07 -03:00
671d4d5dce maintenance: cleanup k3s traefik and wger attrs 2026-01-16 09:27:22 -03:00
9474ab97f2 maintenance: disable k3s traefik; keycloak portal admin roles 2026-01-16 07:53:04 -03:00
5cd196e043 vault/keycloak: restore kv access and wger sync rbac 2026-01-16 03:46:07 -03:00
5816d4f399 comms: fix mas vault file paths 2026-01-15 23:56:32 -03:00
a2b2c7db9d keycloak: align smtp probe user 2026-01-15 04:44:35 -03:00
8db4b4f0b5 keycloak: rerun execute-actions email e2e 2026-01-15 04:37:12 -03:00
c0d0e64bc6 keycloak: rerun realm smtp config 2026-01-15 04:24:16 -03:00
de6665c450 smtp: use mail.bstein.dev for app relays 2026-01-15 04:04:50 -03:00
e6210644c2 smtp: point services at mailu relay 2026-01-15 03:58:03 -03:00
bf9a24681c fix: bump keycloak and portal e2e job names 2026-01-15 03:44:27 -03:00
69cee91dda vault: fix data-prepper pipeline and portal admin secret job 2026-01-15 03:42:57 -03:00
53da4c20ab keycloak: stop writing oauth2-proxy secret 2026-01-15 02:37:04 -03:00
82090c1953 vault: read oidc config from vault 2026-01-14 23:20:04 -03:00
fb671865e5 vault: inject remaining services with wrappers 2026-01-14 17:29:09 -03:00
4f1fb62ab3 vault: bump job names for injector 2026-01-14 14:33:57 -03:00
98d67293bc vault: prepopulate injector for jobs 2026-01-14 14:29:29 -03:00
d559aeb464 keycloak: schedule on arm64 workers 2026-01-14 13:49:37 -03:00
9c16d0fbc0 keycloak: bump job names 2026-01-14 13:42:08 -03:00
89f4b0dbdf vault: stabilize injector templates and add health apps 2026-01-14 13:40:29 -03:00
58c880d9ce keycloak: switch jobs to vault injector 2026-01-14 13:20:57 -03:00
b1f9df4d83 vault: sync harbor pulls 2026-01-14 10:07:31 -03:00
37302664c2 vault: add remaining secret syncs 2026-01-14 06:16:42 -03:00
5683b3f941 jobs: bump names after vault tweaks 2026-01-14 05:47:21 -03:00
9ec08e1dc2 jobs: drop apk in kubectl image 2026-01-14 05:41:01 -03:00
35369d53d8 jobs: bump names for immutability 2026-01-14 05:32:07 -03:00
de3db3133b vault(consumption): sync secrets via CSI 2026-01-14 05:07:23 -03:00
fd2ae6bdd5 vault: wire more services to CSI 2026-01-14 02:54:59 -03:00
55234f8536 vault: align oidc roles with keycloak 2026-01-14 02:24:32 -03:00
1d894ea80f keycloak: fix harbor oidc job 2026-01-14 01:24:18 -03:00
537d304b36 keycloak: bump harbor oidc job 2026-01-14 01:22:30 -03:00