151 Commits

Author SHA1 Message Date
3ccc2a1100 quality: standardize suite checks and add SonarQube stack 2026-04-19 14:18:58 -03:00
091e743d0e maintenance(soteria): add protected UI, OIDC bootstrap, and backup health panel wiring 2026-04-12 15:07:53 -03:00
9a07aa9be9 keycloak: make metis ssh db key optional during migration 2026-04-07 04:40:56 -03:00
a4631dee81 maintenance: migrate metis ssh key names to ananke 2026-04-07 04:36:42 -03:00
e84399d0b1 maintenance: source metis SSH keys from Vault 2026-04-05 10:25:29 -03:00
b502da8871 maintenance: tighten metis access and control ui 2026-03-31 18:47:38 -03:00
bd694db104 sso: attach groups scope to metis oidc client 2026-03-31 17:48:15 -03:00
4ea2b8aeba sso: verify metis oidc secret provisioning 2026-03-31 17:37:56 -03:00
fdc80b9c0f sso: route metis through dedicated oauth2 proxy 2026-03-31 17:32:19 -03:00
bc59270202 chore: organize one-off jobs 2026-01-28 01:48:32 -03:00
d3d534d4f8 keycloak: rerun realm settings job 2026-01-23 22:41:41 -03:00
cf779aa196 keycloak: add vaultwarden_grandfathered flag 2026-01-23 22:31:10 -03:00
4594255cb2 keycloak: bump realm settings job 2026-01-23 02:09:53 -03:00
8bd58f7034 comms/keycloak: add mailu email claim 2026-01-23 02:04:51 -03:00
c985a45113 keycloak: allow harbor direct grants 2026-01-22 12:41:58 -03:00
18a086ce95 keycloak: bump realm settings job name 2026-01-21 03:03:32 -03:00
c804ec040c glue: centralize sync tasks in ariadne 2026-01-21 02:57:40 -03:00
3a6f1785cc ci: add root Jenkinsfile and update keycloak ldap job 2026-01-20 18:11:13 -03:00
c377294d1b fix: unblock keycloak and refresh glue checks 2026-01-19 22:33:34 -03:00
f3620aa2a4 chore: centralize harbor pull credentials 2026-01-19 19:02:14 -03:00
11a06e7683 feat: add Ariadne service and glue scheduling 2026-01-19 16:58:02 -03:00
7c041d4ce5 keycloak: bump jobs for postmark change 2026-01-18 09:27:18 -03:00
b0698887a4 monitoring: add testing dashboard and switch postmark apikey 2026-01-18 09:21:33 -03:00
fc7967cfae keycloak: rerun realm settings job 2026-01-18 01:58:17 -03:00
df1ec16429 mailu: gate sync to approved users 2026-01-18 00:47:38 -03:00
7f3109e4e0 sso: retry mas secret lookup 2026-01-17 03:29:36 -03:00
382557253a sso: retry keycloak secret jobs 2026-01-17 03:24:30 -03:00
a8cb4d8804 keycloak: bump portal admin secret job 2026-01-17 01:54:15 -03:00
66679c428f jobs: bump names after affinity update 2026-01-17 01:52:16 -03:00
7cf0344d59 jobs: prefer arm64 workers 2026-01-17 01:47:53 -03:00
9493ede273 sso: harden keycloak jobs and rerun 2026-01-17 01:41:39 -03:00
8263eb577d sso: rerun realm settings and vault oidc job 2026-01-17 01:36:48 -03:00
9e08bc358d jobs: rerun keycloak realm + mas db ensure 2026-01-17 01:11:45 -03:00
e8ccfa6207 jobs: drop apk installs and prefer arm64 2026-01-17 01:02:58 -03:00
43b552a720 keycloak: bump realm settings job 2026-01-17 01:00:12 -03:00
05cdf75dc6 finance: add actual budget and firefly 2026-01-16 23:52:56 -03:00
fd88e8e04f keycloak: rerun realm and user overrides 2026-01-16 17:47:34 -03:00
574353d884 keycloak: enforce bstein group membership 2026-01-16 17:36:07 -03:00
37571ef738 maintenance: cleanup k3s traefik and wger attrs 2026-01-16 09:27:22 -03:00
b72561e5ec maintenance: disable k3s traefik; keycloak portal admin roles 2026-01-16 07:53:04 -03:00
a603b88eea vault/keycloak: restore kv access and wger sync rbac 2026-01-16 03:46:07 -03:00
621550cba1 comms: fix mas vault file paths 2026-01-15 23:56:32 -03:00
6d249466ee keycloak: align smtp probe user 2026-01-15 04:44:35 -03:00
9bddcd1e76 keycloak: rerun execute-actions email e2e 2026-01-15 04:37:12 -03:00
397eefdaf6 keycloak: rerun realm smtp config 2026-01-15 04:24:16 -03:00
98ca8f6b1a smtp: use mail.bstein.dev for app relays 2026-01-15 04:04:50 -03:00
e6ce9b0d88 smtp: point services at mailu relay 2026-01-15 03:58:03 -03:00
ad0b6d597d fix: bump keycloak and portal e2e job names 2026-01-15 03:44:27 -03:00
30588fd739 vault: fix data-prepper pipeline and portal admin secret job 2026-01-15 03:42:57 -03:00
5b8dd6f322 keycloak: stop writing oauth2-proxy secret 2026-01-15 02:37:04 -03:00