k8scd

rubenhensen/k8scd

0 Fork 0

mirror of https://github.com/rubenhensen/k8scd.git synced 2026-11-15 22:29:09 +01:00

Commit Graph

Author	SHA1	Message	Date
Ruben Hensen	70151b0ef4	authentik: certificate for auth.scoutingmbg.nl The login of the Scouting MBG photos moves to the group's own domain; the Gateway listener follows once the certificate is there.	2026-10-24 18:51:27 +02:00
Ruben Hensen	1f04831a97	Replace the Ingresses with Certificate resources ingress-nginx is gone and every app is served by the Envoy Gateway. The certificates were created by cert-manager's ingress-shim and are owned by the Ingresses, so each app now declares its Certificate itself, with the same name, secret and usages, so nothing gets reissued. gateway-shim can't take over because the certificates live in the app namespaces. immich drops mbg.hensen.io, which has no route, so that one certificate is reissued through the Gateway's HTTP-01 solver. Also removes the Longhorn test-port redirect URI and updates comments that still described nginx.	2026-10-23 21:20:25 +02:00

Author

SHA1

Message

Date

Ruben Hensen

70151b0ef4

authentik: certificate for auth.scoutingmbg.nl

The login of the Scouting MBG photos moves to the group's own domain; the Gateway listener follows once the certificate is there.

2026-10-24 18:51:27 +02:00

Ruben Hensen

1f04831a97

Replace the Ingresses with Certificate resources

ingress-nginx is gone and every app is served by the Envoy Gateway. The certificates were created by cert-manager's ingress-shim and are owned by the Ingresses, so each app now declares its Certificate itself, with the same name, secret and usages, so nothing gets reissued. gateway-shim can't take over because the certificates live in the app namespaces.

immich drops mbg.hensen.io, which has no route, so that one certificate is reissued through the Gateway's HTTP-01 solver.

Also removes the Longhorn test-port redirect URI and updates comments that still described nginx.

2026-10-23 21:20:25 +02:00