Scooby Husky f98c997293 Vault OIDC login via Authentik: hostAlias + blueprint config ...

Vault's OIDC auth method needs to resolve auth.kube.huskypup.net (the
issuer URL) from inside its own pod - no in-cluster DNS entry exists for
that public hostname, so add a hostAlias pointing at the live
istio-ingressgateway LoadBalancer IP (verified current: 172.28.101.244).

authentik-blueprints-vault (vault-blueprint.yaml) was already applied to
the cluster and referenced by the authentik Deployment for some time -
committing it now so git matches the live, working state instead of
leaving it as an untracked local file.

2026-08-18 18:07:36 -05:00

apps

Add CNPG ScheduledBackup for authentik/n8n/nextcloud - WAL archiving alone isn't restorable

2026-08-17 22:49:50 -05:00

argocd-apps

Phase 2: deploy n8n and Nextcloud warm standbys on the VPS

2026-08-17 22:31:41 -05:00

charts

Remove nessus app and fix envoy-gateway OCI chart bug

2026-03-10 19:41:36 -05:00

environments

Initial commit

2026-03-09 20:21:35 -05:00

hooks

Initial commit

2026-03-09 20:21:35 -05:00

infrastructure

Vault OIDC login via Authentik: hostAlias + blueprint config

2026-08-18 18:07:36 -05:00

scripts

Fix DDNS/failover Cloudflare zone name and add restricted PSS securityContext

2026-08-17 15:55:47 -05:00

.gitignore

Initial commit

2026-03-09 20:21:35 -05:00

bootstrap.yaml

Set GitLab repo URL and update ArgoCD hostAliases

2026-03-09 22:18:26 -05:00

CLAUDE.md

Initial commit

2026-03-09 20:21:35 -05:00

S

Description

No description provided

953 KiB

Languages

Shell 94%

Go Template 6%