These checks probed resources retired during the PVE->K8s migration and have been failing since e2e could run again (the fetch-kubeconfig path was broken ~45h). Verified each against live cluster + repo before removing:
- migration-bucket OBC Bound (authentik/paperless/audiobookshelf): no such OBCs exist in the cluster or repo (kubectl get obc -A is empty).
- Ceph RGW S3 round-trip: mounts the migration-bucket Secret/ConfigMap that the (gone) OBC generated; can't run. (The CephObjectStore rook-ceph/migration is itself now vestigial — separate cleanup.)
- TLS for auth.k.renner.uno: retired hostname, no Traefik router (serves the default cert / 404). Kept dash.k/audiobooks.k.renner.uno, which are real.
- authentik OIDC well-known: paperless: paperless uses an Authentik proxy outpost, not OIDC, so it has no /application/o/paperless provider (404). Kept audiobookshelf + grafana, which are real OIDC apps (200).
Left intact: loki/prometheus/alertmanager/paperless-docs and all storage/velero/cert/db checks — those are valid and merely flaked transiently during the recent cluster churn.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
k.rennerandClaude Opus 4.8