claude-botandClaude Fable 5 fa437a608c feat(secrets): migrate authentik secrets to OpenBao (final batch) ...

authentik-secrets + samba-bridge config: values in OpenBao KV, both
round-trip-verified text. The identity provider was deliberately last —
every other consumer proved the pipeline first. ZERO sops files remain
under kubernetes/; authentik KS decryption dropped. Phase 4 (age-key
retirement) is now unblocked pending soak.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01CRgBFn9m8a2ncFMLusikH6

2026-07-14 01:34:04 +02:00

..

alertmanager-gate-egress.yaml

Gate Alertmanager behind Authentik

2026-07-10 17:27:45 +02:00

blueprints-configmap.yaml

feat(esphome): deploy ESPHome Device Builder behind an Authentik gate

2026-07-12 19:08:59 +02:00

esphome-gate-egress.yaml

feat(esphome): deploy ESPHome Device Builder behind an Authentik gate

2026-07-12 19:08:59 +02:00

externalsecret.yaml

feat(secrets): migrate authentik secrets to OpenBao (final batch)

2026-07-14 01:34:04 +02:00

helmrelease.yaml

authentik: Passkey-Step-up-Flow für Home Assistant und NetBird

2026-07-07 08:54:30 +02:00

kustomization.yaml

feat(secrets): migrate authentik secrets to OpenBao (final batch)

2026-07-14 01:34:04 +02:00

ldap-outpost-cert.yaml

authentik: wire LDAP Unifi on sibling DN + LDAPS via cert-manager

2026-05-26 21:27:02 +02:00

ldap-outpost-cnp.yaml

authentik: wire LDAP Unifi on sibling DN + LDAPS via cert-manager

2026-05-26 21:27:02 +02:00

ldap-outpost-lb.yaml

authentik: wire LDAP Unifi on sibling DN + LDAPS via cert-manager

2026-05-26 21:27:02 +02:00

outpost-servicemonitors.yaml

authentik: scrape radius outpost via standalone Service + ServiceMonitor

2026-05-21 07:43:39 +02:00

paperless-gate-egress.yaml

paperless: convert trust-boundary policy to CiliumNetworkPolicy + add gate egress

2026-05-10 09:38:55 +02:00

paperless-gate-ingress.yaml

ingress: cut auth.renner.uno (authentik-server + paperless-gate-outpost) to traefik

2026-05-17 16:43:31 +02:00

prometheus-gate-egress.yaml

Gate Prometheus behind Authentik

2026-07-10 18:41:28 +02:00

samba-bridge-externalsecret.yaml

feat(secrets): migrate authentik secrets to OpenBao (final batch)

2026-07-14 01:34:04 +02:00

shelly-manager-gate-egress.yaml

Gate shelly-manager behind Authentik passkey step-up

2026-07-09 13:42:51 +02:00

vscode-gate-egress.yaml

feat(home-assistant): gate vscode/code-server behind Authentik passkey step-up

2026-07-09 01:17:46 +02:00