|
|
677214b848
|
REFACTOR(repo): move vault/ to manifests/
- Move ExternalSecret file from vault/ to manifests/secret.yaml
- Update kustomization.yaml references
- Remove vault/ folder
Apps: authelia
|
2026-01-06 16:43:38 +09:00 |
|
|
|
3c51bb3b5e
|
FIX(authelia): keep ingress in manifests
- Keep ingress in manifests/ due to chart schema complexity
- Authelia chart has complex ingress schema
|
2026-01-06 15:27:17 +09:00 |
|
|
|
52bc1b9d57
|
FIX(authelia): use rulesOverride for config
- Use rulesOverride for access control configuration
- Fix invalid Helm values properties
|
2026-01-06 15:26:24 +09:00 |
|
|
|
875dbbc42c
|
REFACTOR(authelia): integrate ingress in values
- Move config.yaml, middleware.yaml, rbac.yaml to manifests/
- Add ingress configuration to helm-values.yaml
- Remove separate ingress.yaml
|
2026-01-06 15:12:22 +09:00 |
|
|
|
321685822f
|
REFACTOR(repo): security repo structure
- Add application.yaml for ArgoCD app-of-apps
- Add kustomization.yaml with security components
- Add renovate.json for automated updates
- Update all component argocd.yaml repoURLs to security repo
Components: authelia, vault, external-secrets, falco, trivy
|
2026-01-05 00:40:26 +09:00 |
|
|
|
9822441e38
|
REFACTOR(repo): migrate repoURL to K3S-HOME
- Update repository URL to K3S-HOME organization
- Change from personal to organization repo
|
2026-01-05 00:40:26 +09:00 |
|
|
|
168193845b
|
FIX(authelia): fix TOTP config for chart 0.10.x
- Change enabled to disable for TOTP configuration
- Fix chart compatibility
|
2026-01-05 00:40:26 +09:00 |
|
renovate[bot]
|
a6342a2fdd
|
CHORE(authelia): update authelia to 0.10.x
- Upgrade Authelia chart version
- Apply dependency updates
|
2026-01-05 00:40:26 +09:00 |
|
|
|
a9a4ed1bf3
|
FIX(authelia): increase Authelia memory limit
- to 256Mi
OOMKilled with 128Mi limit. Increased to 256Mi for stability.
|
2026-01-05 00:40:26 +09:00 |
|
|
|
8d46ae9e49
|
FEAT(immich): add email to admin user for OAuth
- Add email field to admin user
- Required for Immich OAuth integration
|
2026-01-05 00:40:26 +09:00 |
|
|
|
04bc972466
|
FEAT(authelia): add Immich as OIDC client in Authelia
- Add Immich OIDC client configuration
- Enable OAuth authentication for Immich
|
2026-01-05 00:40:26 +09:00 |
|
|
|
ddc733d2d2
|
FEAT(authelia): add Vault as OIDC client in Authelia
- Add Vault OIDC client configuration
- Add VAULT_CLIENT_SECRET to ExternalSecret
- Mount VAULT_CLIENT_SECRET in pod
|
2026-01-05 00:40:26 +09:00 |
|
|
|
159e135ee8
|
FEAT(authelia): add OIDC admin ClusterRoleBinding
- Add ClusterRoleBinding for Authelia SSO
- Enable admin access via OIDC
|
2026-01-05 00:40:26 +09:00 |
|
|
|
0be0f4cb5a
|
FEAT(authelia): add jwks config for authelia oidc
- Mount jwks.pem from authelia-secrets
- Configure JWKS with RS256 algorithm
|
2026-01-05 00:40:26 +09:00 |
|
|
|
ef31735060
|
FIX(vault): fix OIDC HMAC secret key name
- Change key name from secret to key
- Fix Vault secret reference
|
2026-01-05 00:40:26 +09:00 |
|
|
|
e4fb804b3d
|
FEAT(headlamp): enable authelia oidc provider
- with headlamp client
- Add OIDC identity provider configuration
- Add Headlamp as OIDC client
- Update ExternalSecret for OIDC secrets (HMAC, JWKS, Headlamp client
secret)
|
2026-01-04 23:41:39 +09:00 |
|
|
|
d88cf75b95
|
FIX(authelia): fix Authelia secret key names
- Update key names to match chart expectations
- Fix ExternalSecret configuration
|
2026-01-04 23:41:39 +09:00 |
|
|
|
de5183469e
|
FEAT(authelia): add JWT_HMAC_KEY to ExternalSecret
- Add JWT_HMAC_KEY for password reset functionality
- Update ExternalSecret configuration
|
2026-01-04 23:41:39 +09:00 |
|
|
|
a4d9adc273
|
FIX(authelia): fix OIDC client_secret with plaintext prefix
- Use plaintext prefix for client secret
- Fix OIDC authentication
|
2026-01-04 23:41:39 +09:00 |
|
|
|
520261d36e
|
FEAT(authelia): enable Authelia OIDC provider with MinIO client
- Enable OIDC identity provider
- Add MinIO as OIDC client
- Configure secrets from Vault
|
2026-01-04 23:41:39 +09:00 |
|
|
|
2ce3a296ae
|
REFACTOR(authelia): remove OIDC config files
- Remove OIDC configuration files
- Clean up unused configurations
|
2026-01-04 23:41:39 +09:00 |
|
|
|
fe357836c3
|
FEAT(authelia): integrate Authelia secrets
- Add ExternalSecret for Authelia
- Enable Vault integration for secrets
|
2026-01-04 23:41:39 +09:00 |
|
|
|
334c16f22a
|
REFACTOR(postgresql): change Authelia PostgreSQL user
- Change database user from app to bluemayne
- Update authentication configuration
|
2026-01-04 23:41:39 +09:00 |
|
|
|
db24350909
|
REFACTOR(repo): rename users-database.yaml
- to config.yaml
|
2026-01-04 23:41:39 +09:00 |
|
|
|
a22f4240b5
|
FIX(authelia): authelia secret keys
- to dot notation
|
2026-01-04 23:41:39 +09:00 |
|
|
|
9081778d80
|
FIX(postgresql): postgresql password property key
|
2026-01-04 23:41:39 +09:00 |
|
|
|
d049fd42f3
|
FIX(authelia): authelia secret key format
- dot notation
|
2026-01-04 23:41:39 +09:00 |
|
|
|
f8d383f02e
|
REFACTOR(postgresql): switch authelia
- to pg storage, fix secr...
|
2026-01-04 23:41:39 +09:00 |
|
|
|
9af3f96546
|
CHORE(authelia): update Authelia admin password
- hash
|
2026-01-04 23:41:39 +09:00 |
|
|
|
0ec31ac5a9
|
FEAT(authentik): add authelia sso
- replacing authentik
|
2026-01-04 23:41:39 +09:00 |
|
