feature/sso #4

Merged

bstein merged 30 commits from feature/sso into main 2025-12-11 20:43:36 +00:00

Conversation 0 Commits 30 Files Changed 31 +567 -89

bstein commented 2025-12-11 20:43:17 +00:00

Owner

Copy Link

Just merging functionality for longhorn dash - zot and vault need separate branches for when they are merged in later.

Just merging functionality for longhorn dash - zot and vault need separate branches for when they are merged in later.

bstein added 30 commits 2025-12-11 20:43:18 +00:00

keycloak: add raw manifests backed by shared postgres 2db550afdd

flux: track feature/sso 61c5db5c99

flux: add keycloak kustomization f64e60c5a2

monitoring: show GPU share over dashboard range 0db149605d

notes: capture GPU share change and flux branch 47caf08885

chore: drop AGENTS.md from repo b14a9dcb98

keycloak: remove optimized flag for first start 1d346edd28

keycloak: set fsGroup for data volume 1b01052eda

keycloak: enable health/metrics management port f0a8f6d35e

keycloak: honor xforwarded headers and hostname url 141c05b08f

keycloak: prefer rpi nodes, avoid titan-24 f4da27271e

keycloak: require rpi nodes with titan-24 fallback 88c7a1c2aa

keycloak: restrict to worker rpis with titan-24 fallback 598bdfc727

add oauth2-proxy for SSO forward-auth a55502fe27

auth: wire oauth2-proxy and enable grafana oidc 8d5e6c267c

auth: add namespace-local forward-auth middlewares 27e5c9391c

oauth2-proxy: temporarily drop group restriction dbede55ad4

auth: point forward-auth to external auth host 5e59f20bc3

auth: add 401 redirect middleware to oauth2-proxy 20bb776625

auth: use internal oauth2-proxy svc for forward-auth 4a089876ba

oauth2-proxy: ensure error middleware on auth ingress 25ee698021

oauth2-proxy: schedule on worker rpis 04aa32a762

auth: forward-auth via external auth host (svc traffic flaky) 24fbaad040

oauth2-proxy: drop groups scope to avoid invalid_scope ceb692f7ee

auth: remove error middleware to allow redirect a7e9f1f7d8

longhorn/vault: gate via oauth2-proxy 6c62d42f7a

zot,vault: remove oauth2-proxy sso 2f368f6975

vault: drop traefik basicauth 20cd185c0b

zot: revert to unauthenticated registry cb2b2ec1cd

zot: restore main branch config 319b515882

bstein merged commit 9f226c1584 into main 2025-12-11 20:43:36 +00:00

bstein referenced this issue from a commit 2025-12-11 20:43:37 +00:00

Merge pull request 'feature/sso' (#4) from feature/sso into main

Sign in to join this conversation.

Reviewers

No Reviewers

Labels

No items

No Label

Milestone

No items

No Milestone

Projects

Clear projects

No project

Assignees

Clear assignees

bstein

No Assignees

1 Participants

Notifications

Subscribe

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: bstein/titan-iac#4

No description provided.