3 Commits

Include renames

Author	SHA1	Message	Date
Scooby HuskyandClaude Opus 4.6	fb0ed0071f	Set X-Forwarded-Proto header for Ceph dashboard SAML authentication ... Dashboard runs with ssl: false behind TLS-terminating proxy, so SAML library sees http:// URLs and rejects responses expecting https://. Explicitly set X-Forwarded-Proto: https on both Istio VirtualService and Envoy Gateway HTTPRoute so the SAML ACS URL matches. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-03-14 13:48:35 -05:00
Scooby HuskyandClaude Opus 4.6	131cbca4a6	Fix ArgoCD ServerSideDiff permanent OutOfSync diffs ... Add explicit CRD/API defaults to manifests that were causing ArgoCD's SSA dry-run to produce results different from live state: - HTTPRoutes: add group, kind, weight defaults to parentRefs/backendRefs - Kyverno ClusterPolicies: add skipBackgroundRequests, allowExistingViolations - Tetragon TracingPolicies: add return, maxData, resolve, returnCopy defaults - Gateway certificateRefs: add group="" default - Guacamole Gateway: add group="" to certificateRefs Add ignoreDifferences for resources that legitimately differ: - Cilium cert Secrets (auto-generated, data always differs) - Istio ValidatingWebhookConfiguration failurePolicy (istiod mutates) - Crowdsec LAPI Secrets (randomly generated) - ServiceMonitor/PodMonitor relabeling action defaults - StatefulSet volumeClaimTemplates apiVersion/kind defaults Persist argocd-cm ignoreDifferences config in ArgoCD Helm values. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-03-10 17:32:59 -05:00
Scooby Husky	aacb8eebbe	Initial commit	2026-03-09 20:21:35 -05:00