chrisfu/prole
1
0
Fork 0
mirror of https://github.com/dredx/prole.git synced 2026-09-24 19:04:31 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity
2a2b16d0fa
prole/deploy/opentofu/k3s/manifests/knoe
History
chrisfu 2a2b16d0fa feat(gitea): add Kerberos SPNEGO proxy for git.prole.org SSO 
Deploys an Apache + mod_auth_gssapi sidecar in the gitea namespace that
handles SPNEGO/Kerberos negotiation (HTTP/git.prole.org@PROLE.ORG) and
injects X-WEBAUTH-USER for Gitea reverse-proxy auto-login.

Identity chain:
  Browser → Traefik TLS → Kong → gitea-spnego-proxy:4000
    → GSSAPI negotiate → X-WEBAUTH-USER: <username>
    → gitea-http:3000 (reverse proxy auto-registration)

Changes:
- gitea-spnego-proxy.yaml: krb5.conf ConfigMap + Deployment + Service
- gitea/spnego-proxy/: Dockerfile and Apache vhost (build source)
- kong-configmap.yaml: route git.prole.org → gitea-spnego-proxy:4000

Gitea reverse proxy settings applied via helm upgrade:
  ENABLE_REVERSE_PROXY_AUTHENTICATION=true
  ENABLE_REVERSE_PROXY_AUTO_REGISTRATION=true
  REVERSE_PROXY_AUTHENTICATION_USER_HEADER=X-WEBAUTH-USER

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-08 02:53:05 -07:00
..
dashboard-ingress.yaml Complete rebranding from prole to knoe and fix macOS application identity. Bulk renamed 'prole' to 'knoe' across code, scripts, and manifests. Updated Makefile with 'knoe', 'build', and 'start' targets. Implemented macOS Application Bundle (.app) support for correct identity. Fixed macOS 'Python' process name to 'Knoe.DB Installer' via Objective-C bridge. Standardized application name to 'Knoe.DB Installer' across all interfaces. 2026-04-22 15:08:35 -07:00
garage-configmap.yaml Complete rebranding from prole to knoe and fix macOS application identity. Bulk renamed 'prole' to 'knoe' across code, scripts, and manifests. Updated Makefile with 'knoe', 'build', and 'start' targets. Implemented macOS Application Bundle (.app) support for correct identity. Fixed macOS 'Python' process name to 'Knoe.DB Installer' via Objective-C bridge. Standardized application name to 'Knoe.DB Installer' across all interfaces. 2026-04-22 15:08:35 -07:00
garage-service.yaml Complete rebranding from prole to knoe and fix macOS application identity. Bulk renamed 'prole' to 'knoe' across code, scripts, and manifests. Updated Makefile with 'knoe', 'build', and 'start' targets. Implemented macOS Application Bundle (.app) support for correct identity. Fixed macOS 'Python' process name to 'Knoe.DB Installer' via Objective-C bridge. Standardized application name to 'Knoe.DB Installer' across all interfaces. 2026-04-22 15:08:35 -07:00
garage-statefulset.yaml chore(deploy): cluster config and k3s manifest updates 2026-04-27 14:47:27 -07:00
gitea-spnego-proxy.yaml feat(gitea): add Kerberos SPNEGO proxy for git.prole.org SSO 2026-05-08 02:53:05 -07:00
grafana-proxy-configmap.yaml fix(k3s): disable auth_request in grafana-proxy; disable auth.proxy in Grafana 2026-05-06 18:16:00 -04:00
grafana-proxy-deployment.yaml fix(k3s): fix Kong + grafana-proxy config for prole.org routing 2026-05-06 17:26:40 -04:00
grafana-proxy-service.yaml fix(k3s): fix Kong + grafana-proxy config for prole.org routing 2026-05-06 17:26:40 -04:00
ingress.yaml Complete rebranding from prole to knoe and fix macOS application identity. Bulk renamed 'prole' to 'knoe' across code, scripts, and manifests. Updated Makefile with 'knoe', 'build', and 'start' targets. Implemented macOS Application Bundle (.app) support for correct identity. Fixed macOS 'Python' process name to 'Knoe.DB Installer' via Objective-C bridge. Standardized application name to 'Knoe.DB Installer' across all interfaces. 2026-04-22 15:08:35 -07:00
iscsi-pvs.yaml feat(oauth): add Google OIDC/OAuth2 Proxy support for Studio and Grafana. Add Google OIDC configuration for Grafana in gke.cfg, introduce oauth2-proxy templates and configurations for Supabase Studio, update Helm values/templates for authenticated Studio access, and add ingress/service manifests for Postgres TCP and Prole services. 2026-04-28 11:27:34 -07:00
knoe-auth-deployment.yaml feat(auth): dual IdP for db.prole.org — Google OAuth + Kerberos SPNEGO 2026-05-03 20:03:09 -07:00
knoe-auth-http-keytab-secret.example.yaml feat(auth): dual IdP for db.prole.org — Google OAuth + Kerberos SPNEGO 2026-05-03 20:03:09 -07:00
knoe-auth-kerberos-configmap.yaml Merge claude/crazy-bose-fec256 into main 2026-05-01 16:39:10 -07:00
knoe-auth-secrets.example.yaml Merge claude/crazy-bose-fec256 into main 2026-05-01 16:39:10 -07:00
knoe-auth-service.yaml fix(k3s): add knoe-auth Service and fix nginx auth_request FQDN 2026-05-06 17:51:08 -04:00
knoe-configmap.yaml chore(k3s): rename prole-*.yaml manifests to knoe-* and align contents 2026-05-02 02:58:03 -07:00
knoe-db-barman-objectstore.yaml feat(oauth): add Google OIDC/OAuth2 Proxy support for Studio and Grafana. Add Google OIDC configuration for Grafana in gke.cfg, introduce oauth2-proxy templates and configurations for Supabase Studio, update Helm values/templates for authenticated Studio access, and add ingress/service manifests for Postgres TCP and Prole services. 2026-04-28 11:27:34 -07:00
knoe-db-postgres-service.yaml Complete rebranding from prole to knoe and fix macOS application identity. Bulk renamed 'prole' to 'knoe' across code, scripts, and manifests. Updated Makefile with 'knoe', 'build', and 'start' targets. Implemented macOS Application Bundle (.app) support for correct identity. Fixed macOS 'Python' process name to 'Knoe.DB Installer' via Objective-C bridge. Standardized application name to 'Knoe.DB Installer' across all interfaces. 2026-04-22 15:08:35 -07:00
knoe-db-postgres-tcp-ingress.yaml feat(oauth): add Google OIDC/OAuth2 Proxy support for Studio and Grafana. Add Google OIDC configuration for Grafana in gke.cfg, introduce oauth2-proxy templates and configurations for Supabase Studio, update Helm values/templates for authenticated Studio access, and add ingress/service manifests for Postgres TCP and Prole services. 2026-04-28 11:27:34 -07:00
knoe-db-scheduled-backup.yaml feat(backup): add CNPG ScheduledBackup manifest; fix 6-field cron schedule 2026-05-08 01:35:49 -07:00
knoe-db.yaml Merge claude/crazy-bose-fec256 into main 2026-05-01 16:39:10 -07:00
knoe-deployment.yaml chore(k3s): rename prole-*.yaml manifests to knoe-* and align contents 2026-05-02 02:58:03 -07:00
knoe-kdc-configmap.yaml chore(k3s): rename prole-*.yaml manifests to knoe-* and align contents 2026-05-02 02:58:03 -07:00
knoe-kdc-secrets.example.yaml chore(k3s): rename prole-*.yaml manifests to knoe-* and align contents 2026-05-02 02:58:03 -07:00
knoe-service.yaml chore(k3s): rename prole-*.yaml manifests to knoe-* and align contents 2026-05-02 02:58:03 -07:00
kong-configmap.yaml feat(gitea): add Kerberos SPNEGO proxy for git.prole.org SSO 2026-05-08 02:53:05 -07:00
kong-deployment.yaml fix(k3d): rename prole-svc-kong → knoe-svc-kong, clean up stale resources 2026-05-03 00:24:02 -07:00
kong-service.yaml fix(k3d): rename prole-svc-kong → knoe-svc-kong, clean up stale resources 2026-05-03 00:24:02 -07:00
kustomization.yaml feat(oauth): add Google OIDC/OAuth2 Proxy support for Studio and Grafana. Add Google OIDC configuration for Grafana in gke.cfg, introduce oauth2-proxy templates and configurations for Supabase Studio, update Helm values/templates for authenticated Studio access, and add ingress/service manifests for Postgres TCP and Prole services. 2026-04-28 11:27:34 -07:00
oauth2-proxy-deployment-prole.yaml feat(auth): add Google Workspace OAuth (prole.org) for Grafana + Supabase Studio 2026-05-06 16:22:49 -04:00
oauth2-proxy-externalname.yaml feat(k3s): add ExternalName service for oauth2-proxy in knoe-system 2026-05-06 17:41:31 -04:00
openbao-service.yaml Complete rebranding from prole to knoe and fix macOS application identity. Bulk renamed 'prole' to 'knoe' across code, scripts, and manifests. Updated Makefile with 'knoe', 'build', and 'start' targets. Implemented macOS Application Bundle (.app) support for correct identity. Fixed macOS 'Python' process name to 'Knoe.DB Installer' via Objective-C bridge. Standardized application name to 'Knoe.DB Installer' across all interfaces. 2026-04-22 15:08:35 -07:00
openbao-statefulset.yaml Complete rebranding from prole to knoe and fix macOS application identity. Bulk renamed 'prole' to 'knoe' across code, scripts, and manifests. Updated Makefile with 'knoe', 'build', and 'start' targets. Implemented macOS Application Bundle (.app) support for correct identity. Fixed macOS 'Python' process name to 'Knoe.DB Installer' via Objective-C bridge. Standardized application name to 'Knoe.DB Installer' across all interfaces. 2026-04-22 15:08:35 -07:00
prole-svc-ingress.yaml feat(oauth): add Google OIDC/OAuth2 Proxy support for Studio and Grafana. Add Google OIDC configuration for Grafana in gke.cfg, introduce oauth2-proxy templates and configurations for Supabase Studio, update Helm values/templates for authenticated Studio access, and add ingress/service manifests for Postgres TCP and Prole services. 2026-04-28 11:27:34 -07:00
storageclass-synology-iscsi.yaml Complete rebranding from prole to knoe and fix macOS application identity. Bulk renamed 'prole' to 'knoe' across code, scripts, and manifests. Updated Makefile with 'knoe', 'build', and 'start' targets. Implemented macOS Application Bundle (.app) support for correct identity. Fixed macOS 'Python' process name to 'Knoe.DB Installer' via Objective-C bridge. Standardized application name to 'Knoe.DB Installer' across all interfaces. 2026-04-22 15:08:35 -07:00
supabase-ingress.yaml Complete rebranding from prole to knoe and fix macOS application identity. Bulk renamed 'prole' to 'knoe' across code, scripts, and manifests. Updated Makefile with 'knoe', 'build', and 'start' targets. Implemented macOS Application Bundle (.app) support for correct identity. Fixed macOS 'Python' process name to 'Knoe.DB Installer' via Objective-C bridge. Standardized application name to 'Knoe.DB Installer' across all interfaces. 2026-04-22 15:08:35 -07:00
supabase-studio.yaml feat(oauth): add Google OIDC/OAuth2 Proxy support for Studio and Grafana. Add Google OIDC configuration for Grafana in gke.cfg, introduce oauth2-proxy templates and configurations for Supabase Studio, update Helm values/templates for authenticated Studio access, and add ingress/service manifests for Postgres TCP and Prole services. 2026-04-28 11:27:34 -07:00
svc-knoe-ingress.yaml feat(infra): replace GitLab with Gitea on git.prole.org 2026-05-07 01:25:32 -04:00
traefik-helmchartconfig.yaml feat(k3s): enable allowExternalNameServices in Traefik 2026-05-06 17:58:50 -04:00