Scooby HuskyandClaude Sonnet 5 c6d4294be6 Widen mTLS PERMISSIVE/AuthorizationPolicy to cover port 61432 too ...

home's own authentik pods reach ha-authentik-postgres via the CoreDNS
rewrite on port 61432 (not just external traffic via NodePort on 5432/
61432) - discovered live that Istio ambient's port-level mTLS/L4
authorization enforcement is keyed on the port actually dialed (61432
here), not just the pod's real containerPort (5432) traffic eventually
reaches after Service translation. The existing port-5432-only rules
(from the streaming-replication fix) didn't cover this in-cluster path,
surfacing as 'server closed the connection unexpectedly' from home's own
authentik-worker pod.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

2026-08-20 18:51:42 -05:00

..

manifests

Widen mTLS PERMISSIVE/AuthorizationPolicy to cover port 61432 too

2026-08-20 18:51:42 -05:00

argocd-blueprint.yaml

Initial commit

2026-03-09 20:21:35 -05:00

ceph-blueprint.yaml

Initial commit

2026-03-09 20:21:35 -05:00

ceph-oidc-blueprint.yaml

Initial commit

2026-03-09 20:21:35 -05:00

forward-auth-blueprint.yaml

Remove nessus from cluster configuration

2026-03-10 21:02:45 -05:00

gitlab-blueprint.yaml

Initial commit

2026-03-09 20:21:35 -05:00

gitlab-saml-blueprint.yaml

Initial commit

2026-03-09 20:21:35 -05:00

grafana-blueprint.yaml

Initial commit

2026-03-09 20:21:35 -05:00

guacamole-blueprint.yaml

Initial commit

2026-03-09 20:21:35 -05:00

home-assistant-blueprint.yaml

Initial commit

2026-03-09 20:21:35 -05:00

n8n-blueprint.yaml

Initial commit

2026-03-09 20:21:35 -05:00

netbird-blueprint.yaml

Initial commit

2026-03-09 20:21:35 -05:00

nextcloud-blueprint.yaml

Initial commit

2026-03-09 20:21:35 -05:00

percona-everest-blueprint.yaml

Initial commit

2026-03-09 20:21:35 -05:00

prometheus-blueprint.yaml

Initial commit

2026-03-09 20:21:35 -05:00

rancher-blueprint.yaml

Initial commit

2026-03-09 20:21:35 -05:00

values.yaml

Fix real cause of VPS authentik's DB timeout loop + repo secrets cleanup

2026-08-20 18:47:50 -05:00

vault-blueprint.yaml

Vault OIDC login via Authentik: hostAlias + blueprint config

2026-08-18 18:07:36 -05:00