3bc0b76135
PERF(repo): apply CPU/Memory limits based on VPA
...
- Set CPU request to VPA recommendation
- Set CPU limit to VPA × 1.5 for burst allowance
- Set Memory limit to VPA × 1.5 to prevent OOM
- Prevent cascading failure on node failure
2026-01-07 23:07:30 +09:00
2bb0b693db
FIX(headlamp): skip TLS verification for OIDC
...
- Add -oidc-skip-tls-verify flag via extraArgs
- Workaround for CA cert validation issue
2026-01-07 01:30:57 +09:00
753543648b
FIX(headlamp): update ingress for chart 0.39.0
...
- Update ingress hosts configuration for new chart version
- Fix breaking changes in Headlamp Helm chart
2026-01-06 15:30:07 +09:00
fb0fb44251
REFACTOR(apps): integrate ingress to helm-values
...
- code-server: move ingress to helm-values, rbac to manifests
- headlamp: move ingress to helm-values, external-secret to manifests
2026-01-06 01:57:21 +09:00
fbe5734fc1
FIX(headlamp): restore oidc config for k3s
...
- Restore OIDC configuration for K3s cluster
- Fix authentication settings
2026-01-05 00:43:51 +09:00
362ebd6c7d
REFACTOR(headlamp): switch to authelia
...
- Remove OIDC config from helm-values
- Remove ExternalSecret (not needed)
- Add Authelia middleware to ingress
- Headlamp uses ServiceAccount for K8s API access
2026-01-05 00:43:51 +09:00
b74bc14950
FIX(headlamp): set baseURL to empty string
...
- Change baseURL to empty string
- Fix path routing configuration
2026-01-05 00:43:51 +09:00
6d19c01bf1
FIX(headlamp): use ExternalSecret for OIDC config
...
- Use externalSecret.enabled instead of env
- Add template to ExternalSecret with all OIDC fields
2026-01-05 00:43:51 +09:00
f17bbe3514
FEAT(headlamp): configure Headlamp OIDC with Authelia
...
- Add OIDC configuration (clientID, issuerURL, scopes)
- Add ExternalSecret for OIDC client secret from Vault
- Remove Authelia middleware (using direct OIDC auth)
2026-01-05 00:43:51 +09:00
5227d9361d
REFACTOR(headlamp): replace k8s-dash with Headlamp
2026-01-05 00:43:51 +09:00