bstein

bstein pushed to feature/sso at bstein/titan-iac

2025-12-07 15:50:02 +00:00

04aa32a762 oauth2-proxy: schedule on worker rpis

bstein pushed to feature/sso at bstein/titan-iac

2025-12-07 15:03:35 +00:00

25ee698021 oauth2-proxy: ensure error middleware on auth ingress

bstein pushed to feature/sso at bstein/titan-iac

2025-12-07 14:25:49 +00:00

4a089876ba auth: use internal oauth2-proxy svc for forward-auth

bstein pushed to feature/sso at bstein/titan-iac

2025-12-07 14:14:46 +00:00

20bb776625 auth: add 401 redirect middleware to oauth2-proxy

bstein pushed to feature/sso at bstein/titan-iac

2025-12-07 14:09:31 +00:00

5e59f20bc3 auth: point forward-auth to external auth host

bstein pushed to feature/sso at bstein/titan-iac

2025-12-07 13:42:35 +00:00

dbede55ad4 oauth2-proxy: temporarily drop group restriction

bstein pushed to feature/sso at bstein/titan-iac

2025-12-07 13:26:07 +00:00

27e5c9391c auth: add namespace-local forward-auth middlewares

bstein pushed to feature/sso at bstein/titan-iac

2025-12-07 05:01:37 +00:00

8d5e6c267c auth: wire oauth2-proxy and enable grafana oidc

bstein pushed to feature/sso at bstein/titan-iac

2025-12-06 17:42:49 +00:00

a55502fe27 add oauth2-proxy for SSO forward-auth

bstein pushed to feature/sso at bstein/titan-iac

2025-12-06 04:44:38 +00:00

598bdfc727 keycloak: restrict to worker rpis with titan-24 fallback

bstein pushed to feature/sso at bstein/titan-iac

2025-12-06 04:40:41 +00:00

88c7a1c2aa keycloak: require rpi nodes with titan-24 fallback

bstein pushed to feature/sso at bstein/titan-iac

2025-12-06 04:36:48 +00:00

f4da27271e keycloak: prefer rpi nodes, avoid titan-24

bstein pushed to feature/sso at bstein/titan-iac

2025-12-06 04:23:24 +00:00

141c05b08f keycloak: honor xforwarded headers and hostname url

bstein pushed to feature/sso at bstein/titan-iac

2025-12-06 03:51:57 +00:00

f0a8f6d35e keycloak: enable health/metrics management port

bstein pushed to feature/sso at bstein/titan-iac

2025-12-06 03:49:27 +00:00

1b01052eda keycloak: set fsGroup for data volume

bstein pushed to feature/sso at bstein/titan-iac

2025-12-06 03:43:40 +00:00

1d346edd28 keycloak: remove optimized flag for first start

b14a9dcb98 chore: drop AGENTS.md from repo

Compare 2 commits »

bstein pushed to feature/sso at bstein/titan-iac

2025-12-03 15:29:03 +00:00

47caf08885 notes: capture GPU share change and flux branch

bstein pushed to feature/sso at bstein/titan-iac

2025-12-02 23:28:55 +00:00

0db149605d monitoring: show GPU share over dashboard range

bstein pushed to feature/sso at bstein/titan-iac

2025-12-02 21:10:38 +00:00

f64e60c5a2 flux: add keycloak kustomization

bstein pushed to feature/sso at bstein/titan-iac

2025-12-02 21:01:41 +00:00

61c5db5c99 flux: track feature/sso