konairius/homelab
10
0
Fork 0
Code Issues 9 Pull Requests 2 Packages Projects Releases 1 Wiki Activity

fix(authentik): admit the UDM's LDAPS sync to the LDAP outpost #1600

Merged
k.renner merged 2 commits from fix/ldap-outpost-udm-ldaps into main 2026-11-07 21:03:33 +00:00
Conversation 0 Commits 2 Files Changed 2
+18
2 Commits
Author SHA1 Message Date
claude-botandClaude Opus 5.5 6a0dbf9e26 fix(authentik): admit only the UDM's own address, not all of k8s-ingress
ci/woodpecker/pr/ci-scripts-test Pipeline was successful
Details
ci/woodpecker/pr/ci-manifests-test Pipeline was successful
Details 
New CIDR group udm-k8s-ingress (10.2.47.1/32, fd02:47::1/128); the LDAPS
rule references it instead of the whole net-k8s-ingress network.

S28-39

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
 2026-11-07 22:02:30 +01:00
claude-botandClaude Opus 5.5 e25f1a43f8 fix(authentik): admit the UDM's LDAPS sync to the LDAP outpost
ci/woodpecker/pr/ci-scripts-test Pipeline was successful
Details
ci/woodpecker/pr/ci-manifests-test Pipeline was canceled
Details 
The UDM authenticates admins against ldap.renner.uno:636 and syncs
hourly. It sources from its k8s-ingress address (10.2.47.1 /
fd02:47::1), which ldap-outpost-lan-ingress did not admit: 200 SYNs a
day dropped at :26 every hour. Same group the alloy-syslog and CoreDNS
policies use for the UDM; LDAPS only.

S28-39

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
 2026-11-07 22:00:21 +01:00