cluster

commit ab592bc1c21eb1ad1e44803e5f4a1d5fc12170c1
parent 79ba0952ce13732bc1aaccfef498334e7c1679fe
Author: MTRNord <MTRNord@users.noreply.github.com>
Date:   Sun,  3 Aug 2025 19:18:05 +0200

Migrate authentik

Diffstat:
M
apps/base/envoy-gateway/release.yaml
 | 
24
++++++++++++------------
M
apps/talos_cluster/authentik/kustomization.yaml
 | 
3
+--
M
apps/talos_cluster/envoy-gateway/gateway_settings.yaml
 | 
24
++++++++++++------------

3 files changed, 25 insertions(+), 26 deletions(-)
diff --git a/apps/base/envoy-gateway/release.yaml b/apps/base/envoy-gateway/release.yaml
@@ -202,18 +202,18 @@ spec:
             certificateRefs:
                 - kind: Secret
                   name: ui.k8s.midnightthoughts.space-tls
-        - name: https-midnightthoughts-auth
-          protocol: HTTPS
-          hostname: "auth.midnightthoughts.space"
-          port: 443
-          allowedRoutes:
-            namespaces:
-                from: "All"
-          tls:
-            mode: Terminate
-            certificateRefs:
-                - kind: Secret
-                  name: auth.midnightthoughts.space-tls
+        # - name: https-midnightthoughts-auth
+        #   protocol: HTTPS
+        #   hostname: "auth.midnightthoughts.space"
+        #   port: 443
+        #   allowedRoutes:
+        #     namespaces:
+        #         from: "All"
+        #   tls:
+        #     mode: Terminate
+        #     certificateRefs:
+        #         - kind: Secret
+        #           name: auth.midnightthoughts.space-tls
         - name: https-midnightthoughts-ldap
           protocol: HTTPS
           hostname: "ldap.midnightthoughts.space"
diff --git a/apps/talos_cluster/authentik/kustomization.yaml b/apps/talos_cluster/authentik/kustomization.yaml
@@ -5,5 +5,4 @@ resources:
     - repository.yaml
     - ingress.yaml
     - certificates.yaml
-    # TODO: Enable once db is migrated
-    #- release.yaml
+    - release.yaml
diff --git a/apps/talos_cluster/envoy-gateway/gateway_settings.yaml b/apps/talos_cluster/envoy-gateway/gateway_settings.yaml
@@ -115,6 +115,18 @@ spec:
             certificateRefs:
                 - kind: Secret
                   name: talos.midnightthoughts.space-tls
+        - name: https-midnightthoughts-auth
+          protocol: HTTPS
+          hostname: "auth.midnightthoughts.space"
+          port: 443
+          allowedRoutes:
+            namespaces:
+                from: "All"
+          tls:
+            mode: Terminate
+            certificateRefs:
+                - kind: Secret
+                  name: auth.midnightthoughts.space-tls
                   # - name: https-draupnir-midnightthoughts
                   #   protocol: HTTPS
                   #   hostname: "draupnir.midnightthoughts.space"
@@ -187,18 +199,6 @@ spec:
                   #       certificateRefs:
                   #           - kind: Secret
                   #             name: ui.k8s.midnightthoughts.space-tls
-                  # - name: https-midnightthoughts-auth
-                  #   protocol: HTTPS
-                  #   hostname: "auth.midnightthoughts.space"
-                  #   port: 443
-                  #   allowedRoutes:
-                  #       namespaces:
-                  #           from: "All"
-                  #   tls:
-                  #       mode: Terminate
-                  #       certificateRefs:
-                  #           - kind: Secret
-                  #             name: auth.midnightthoughts.space-tls
                   # - name: https-midnightthoughts-ldap
                   #   protocol: HTTPS
                   #   hostname: "ldap.midnightthoughts.space"