cbf00275e8
FEAT(security): enable HA with replica 2 and soft anti-affinity
...
- Add replicaCount: 2 to authelia, external-secrets, falco
- Add soft pod anti-affinity for node distribution
- Configure affinity for all security components
2026-01-08 13:07:56 +09:00
31007c5586
PERF(resources): remove CPU limits - keep memory limits only
...
- CPU throttling prevents app startup, not crashes
- Memory OOM is the real cascading failure cause
- CPU request ensures fair scheduling
2026-01-07 23:48:43 +09:00
41e8771889
FIX(authelia): fix Headlamp OIDC token auth
...
- Change token_endpoint_auth_method to client_secret_basic
- Headlamp uses client_secret_basic by default
- Authelia was configured with client_secret_post
- Fix token exchange failure causing login redirect loop
2026-01-07 02:23:50 +09:00
3c51bb3b5e
FIX(authelia): keep ingress in manifests
...
- Keep ingress in manifests/ due to chart schema complexity
- Authelia chart has complex ingress schema
2026-01-06 15:27:17 +09:00
52bc1b9d57
FIX(authelia): use rulesOverride for config
...
- Use rulesOverride for access control configuration
- Fix invalid Helm values properties
2026-01-06 15:26:24 +09:00
875dbbc42c
REFACTOR(authelia): integrate ingress in values
...
- Move config.yaml, middleware.yaml, rbac.yaml to manifests/
- Add ingress configuration to helm-values.yaml
- Remove separate ingress.yaml
2026-01-06 15:12:22 +09:00
168193845b
FIX(authelia): fix TOTP config for chart 0.10.x
...
- Change enabled to disable for TOTP configuration
- Fix chart compatibility
2026-01-05 00:40:26 +09:00
a9a4ed1bf3
FIX(authelia): increase Authelia memory limit
...
- to 256Mi
OOMKilled with 128Mi limit. Increased to 256Mi for stability.
2026-01-05 00:40:26 +09:00
04bc972466
FEAT(authelia): add Immich as OIDC client in Authelia
...
- Add Immich OIDC client configuration
- Enable OAuth authentication for Immich
2026-01-05 00:40:26 +09:00
ddc733d2d2
FEAT(authelia): add Vault as OIDC client in Authelia
...
- Add Vault OIDC client configuration
- Add VAULT_CLIENT_SECRET to ExternalSecret
- Mount VAULT_CLIENT_SECRET in pod
2026-01-05 00:40:26 +09:00
0be0f4cb5a
FEAT(authelia): add jwks config for authelia oidc
...
- Mount jwks.pem from authelia-secrets
- Configure JWKS with RS256 algorithm
2026-01-05 00:40:26 +09:00
ef31735060
FIX(vault): fix OIDC HMAC secret key name
...
- Change key name from secret to key
- Fix Vault secret reference
2026-01-05 00:40:26 +09:00
e4fb804b3d
FEAT(headlamp): enable authelia oidc provider
...
- with headlamp client
- Add OIDC identity provider configuration
- Add Headlamp as OIDC client
- Update ExternalSecret for OIDC secrets (HMAC, JWKS, Headlamp client
secret)
2026-01-04 23:41:39 +09:00
d88cf75b95
FIX(authelia): fix Authelia secret key names
...
- Update key names to match chart expectations
- Fix ExternalSecret configuration
2026-01-04 23:41:39 +09:00
a4d9adc273
FIX(authelia): fix OIDC client_secret with plaintext prefix
...
- Use plaintext prefix for client secret
- Fix OIDC authentication
2026-01-04 23:41:39 +09:00
520261d36e
FEAT(authelia): enable Authelia OIDC provider with MinIO client
...
- Enable OIDC identity provider
- Add MinIO as OIDC client
- Configure secrets from Vault
2026-01-04 23:41:39 +09:00
334c16f22a
REFACTOR(postgresql): change Authelia PostgreSQL user
...
- Change database user from app to bluemayne
- Update authentication configuration
2026-01-04 23:41:39 +09:00
db24350909
REFACTOR(repo): rename users-database.yaml
...
- to config.yaml
2026-01-04 23:41:39 +09:00
a22f4240b5
FIX(authelia): authelia secret keys
...
- to dot notation
2026-01-04 23:41:39 +09:00
f8d383f02e
REFACTOR(postgresql): switch authelia
...
- to pg storage, fix secr...
2026-01-04 23:41:39 +09:00
0ec31ac5a9
FEAT(authentik): add authelia sso
...
- replacing authentik
2026-01-04 23:41:39 +09:00
