9 Commits

Include renames

Author	SHA1	Message	Date
Ruben Hensen	1f04831a97	Replace the Ingresses with Certificate resources ... ingress-nginx is gone and every app is served by the Envoy Gateway. The certificates were created by cert-manager's ingress-shim and are owned by the Ingresses, so each app now declares its Certificate itself, with the same name, secret and usages, so nothing gets reissued. gateway-shim can't take over because the certificates live in the app namespaces. immich drops mbg.hensen.io, which has no route, so that one certificate is reissued through the Gateway's HTTP-01 solver. Also removes the Longhorn test-port redirect URI and updates comments that still described nginx.	2026-10-23 21:20:25 +02:00
Ruben Hensen	910b792452	longhorn: log in through authentik on the Gateway ... Longhorn has no users of its own; nginx guarded it with basic auth using apr1 hashes, which Envoy Gateway does not support. An Envoy Gateway SecurityPolicy now sends visitors through an authentik OIDC application that only admins may use. The client secret lives in Vault at kv/longhorn-oidc and reaches both authentik and Envoy through External Secrets.	2026-10-23 21:07:31 +02:00
Ruben Hensen	50beeffbac	Rm helm-longhorn kustomize.yaml	2025-03-01 14:08:04 +01:00
Ruben Hensen	36fe51b613	Rm tracking patch	2025-03-01 14:02:40 +01:00
Ruben Hensen	afd437d77b	Longhorn: Tracking method 3	2025-03-01 13:59:42 +01:00
Ruben Hensen	e31cd97aaa	Longhorn: Tracking method 2	2025-03-01 13:56:59 +01:00
Ruben Hensen	54bc19def4	Longhorn: Re-add longhorn with kustomize	2025-03-01 13:45:38 +01:00
Ruben Hensen	217c6b9c9f	Longhorn: add CRDs 2	2025-03-01 13:44:33 +01:00
Ruben Hensen	888e3bab41	Longhorn: add CRDs	2025-03-01 13:42:19 +01:00