bstein

bstein pushed to feature/sso at bstein/titan-iac

2025-12-07 22:44:27 +00:00

6c62d42f7a longhorn/vault: gate via oauth2-proxy

bstein pushed to feature/sso at bstein/titan-iac

2025-12-07 16:20:06 +00:00

a7e9f1f7d8 auth: remove error middleware to allow redirect

bstein pushed to feature/sso at bstein/titan-iac

2025-12-07 16:09:52 +00:00

ceb692f7ee oauth2-proxy: drop groups scope to avoid invalid_scope

bstein pushed to feature/sso at bstein/titan-iac

2025-12-07 16:03:47 +00:00

24fbaad040 auth: forward-auth via external auth host (svc traffic flaky)

bstein pushed to feature/sso at bstein/titan-iac

2025-12-07 15:50:02 +00:00

04aa32a762 oauth2-proxy: schedule on worker rpis

bstein pushed to feature/sso at bstein/titan-iac

2025-12-07 15:03:35 +00:00

25ee698021 oauth2-proxy: ensure error middleware on auth ingress

bstein pushed to feature/sso at bstein/titan-iac

2025-12-07 14:25:49 +00:00

4a089876ba auth: use internal oauth2-proxy svc for forward-auth

bstein pushed to feature/sso at bstein/titan-iac

2025-12-07 14:14:46 +00:00

20bb776625 auth: add 401 redirect middleware to oauth2-proxy

bstein pushed to feature/sso at bstein/titan-iac

2025-12-07 14:09:31 +00:00

5e59f20bc3 auth: point forward-auth to external auth host

bstein pushed to feature/sso at bstein/titan-iac

2025-12-07 13:42:35 +00:00

dbede55ad4 oauth2-proxy: temporarily drop group restriction

bstein pushed to feature/sso at bstein/titan-iac

2025-12-07 13:26:07 +00:00

27e5c9391c auth: add namespace-local forward-auth middlewares

bstein pushed to feature/sso at bstein/titan-iac

2025-12-07 05:01:37 +00:00

8d5e6c267c auth: wire oauth2-proxy and enable grafana oidc

bstein pushed to feature/sso at bstein/titan-iac

2025-12-06 17:42:49 +00:00

a55502fe27 add oauth2-proxy for SSO forward-auth

bstein pushed to feature/sso at bstein/titan-iac

2025-12-06 04:44:38 +00:00

598bdfc727 keycloak: restrict to worker rpis with titan-24 fallback

bstein pushed to feature/sso at bstein/titan-iac

2025-12-06 04:40:41 +00:00

88c7a1c2aa keycloak: require rpi nodes with titan-24 fallback

bstein pushed to feature/sso at bstein/titan-iac

2025-12-06 04:36:48 +00:00

f4da27271e keycloak: prefer rpi nodes, avoid titan-24

bstein pushed to feature/sso at bstein/titan-iac

2025-12-06 04:23:24 +00:00

141c05b08f keycloak: honor xforwarded headers and hostname url

bstein pushed to feature/sso at bstein/titan-iac

2025-12-06 03:51:57 +00:00

f0a8f6d35e keycloak: enable health/metrics management port

bstein pushed to feature/sso at bstein/titan-iac

2025-12-06 03:49:27 +00:00

1b01052eda keycloak: set fsGroup for data volume

bstein pushed to feature/sso at bstein/titan-iac

2025-12-06 03:43:40 +00:00

1d346edd28 keycloak: remove optimized flag for first start

b14a9dcb98 chore: drop AGENTS.md from repo

Compare 2 commits »