claude-botandClaude Opus 5.5
01213d6ee0
paperless, shelly-manager, zone-configurator, esphome, zigbee2mqtt, alertmanager, prometheus, wiki, paperclip, navidrome, lidarr and wordpress now gate through authentik-gate-sync: each source Ingress names its real backend and carries the old provider's settings as annotations (group, login-flow, authorization-flow where it was implicit consent, paperless' skip-path). Removed per gate: the ExternalName Service, the egress CNP in authentik, the namespace CNP rule admitting the old outpost, and the blueprint provider/application/binding/outpost (state: absent, outpost -> application -> provider). Groups stay declared without users lists; membership is managed in Authentik. Per-gate specifics: - paperless: the docs.renner.uno alias backends the generated paperless-gate Service (its middleware redirects before the backend); the auth.renner.uno/outpost.goauthentik.io route is removed, proxy outposts take their callback on the app host. - alertmanager / prometheus: source Ingresses renamed to alertmanager / prometheus; the controller generates the *-gate route Ingresses. - wordpress-admin: gains a tls block for www.renner.uno (wordpress-tls, certificate still owned by the public Ingress), so the gate's external host stays https. - wiki, paperclip: only the gate peer/rule leaves their shared CNPs. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
9 lines
166 B
YAML
9 lines
166 B
YAML
apiVersion: kustomize.config.k8s.io/v1beta1
|
|
kind: Kustomization
|
|
resources:
|
|
- externalsecret.yaml
|
|
- mariadb.yaml
|
|
- pvc.yaml
|
|
- deployment.yaml
|
|
- ingress.yaml
|