prole/deploy/gcp/gke
chrisfu 885fa99a29 feat(auth): add Google Workspace OAuth (prole.org) for Grafana + Supabase Studio
- monitoring/kps-values-k3s.yaml: Grafana helm values for k3s homelab with
  dual auth (auth.proxy Kerberos + auth.google for prole.org Workspace)
- grafana-proxy-configmap.yaml: nginx passthrough for /grafana/login/google
  and /grafana/login to allow Google OAuth flow without knoe-auth redirect
- grafana-google-oidc-secret-prole.example.yaml: Secret template for Grafana
  Google OAuth client (svc.prole.org, Internal consent, prole.org Workspace)
- oauth2-proxy-google-oidc-secret-prole.example.yaml: Secret template for
  oauth2-proxy gating db.prole.org Studio
- oauth2-proxy-deployment-prole.yaml: k3s oauth2-proxy deployment for
  db.prole.org (prole.org domain, no BackendConfig)
- init_grafana_oauth_prole.sh: Bootstrap script for Grafana OAuth secret
- init_oauth2_proxy_prole.sh: Bootstrap script for Studio oauth2-proxy

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-06 16:22:49 -04:00
..
argocd-oidc-cm.yaml feat: Kerberos identity management — PROLE.LOCAL realm, cross-realm trust, user provisioning 2026-04-01 20:38:57 -07:00
cnpg-prometheus-ilb.yaml Merge claude/crazy-bose-fec256 into main 2026-05-01 16:39:10 -07:00
gitlab-google-oidc-secret.example.yaml Complete rebranding from prole to knoe and fix macOS application identity. Bulk renamed 'prole' to 'knoe' across code, scripts, and manifests. Updated Makefile with 'knoe', 'build', and 'start' targets. Implemented macOS Application Bundle (.app) support for correct identity. Fixed macOS 'Python' process name to 'Knoe.DB Installer' via Objective-C bridge. Standardized application name to 'Knoe.DB Installer' across all interfaces. 2026-04-22 15:08:35 -07:00
grafana-google-oidc-secret-prole.example.yaml feat(auth): add Google Workspace OAuth (prole.org) for Grafana + Supabase Studio 2026-05-06 16:22:49 -04:00
grafana-google-oidc-secret.example.yaml Merge claude/crazy-bose-fec256 into main 2026-05-01 16:39:10 -07:00
knoe-auth-deployment.yaml feat: ship Junie #3 (image rename) + Phase 2 OIDC GKE deploy + k3d chrisfu seed 2026-05-02 13:07:40 -07:00
knoe-auth-google-oidc-secret.example.yaml Complete rebranding from prole to knoe and fix macOS application identity. Bulk renamed 'prole' to 'knoe' across code, scripts, and manifests. Updated Makefile with 'knoe', 'build', and 'start' targets. Implemented macOS Application Bundle (.app) support for correct identity. Fixed macOS 'Python' process name to 'Knoe.DB Installer' via Objective-C bridge. Standardized application name to 'Knoe.DB Installer' across all interfaces. 2026-04-22 15:08:35 -07:00
knoe-auth-oidc-secret.example.yaml Phase 1: OIDC provider integration and GKE auth deployment 2026-04-28 12:22:45 -07:00
knoe-db-backup-gcs.yaml chore(deploy): split knoe-db-backup-gcs manifest — SA only, drop legacy ScheduledBackup 2026-05-02 03:00:51 -07:00
knoe-db-external-lb.yaml Merge claude/crazy-bose-fec256 into main 2026-05-01 16:39:10 -07:00
knoe-db-podmonitor.yaml fix(cnpg,kong): wire cnpg-backup-sa, migrate PodMonitor, drop DASHBOARD consumer 2026-05-02 03:08:34 -07:00
knoe-db.yaml fix(cnpg,kong): wire cnpg-backup-sa, migrate PodMonitor, drop DASHBOARD consumer 2026-05-02 03:08:34 -07:00
knoe-kdc-configmap.yaml feat(auth): land Round 1 — invite-OTP enrollment, kadmin client, GKE manifests 2026-04-27 14:47:27 -07:00
knoe-kdc-secrets.yaml feat(auth): land Round 1 — invite-OTP enrollment, kadmin client, GKE manifests 2026-04-27 14:47:27 -07:00
knoe-onboard.yaml Merge claude/crazy-bose-fec256 into main 2026-05-01 16:39:10 -07:00
namespace.yaml Complete rebranding from prole to knoe and fix macOS application identity. Bulk renamed 'prole' to 'knoe' across code, scripts, and manifests. Updated Makefile with 'knoe', 'build', and 'start' targets. Implemented macOS Application Bundle (.app) support for correct identity. Fixed macOS 'Python' process name to 'Knoe.DB Installer' via Objective-C bridge. Standardized application name to 'Knoe.DB Installer' across all interfaces. 2026-04-22 15:08:35 -07:00
oauth2-proxy-deployment.yaml Merge claude/crazy-bose-fec256 into main 2026-05-01 16:39:10 -07:00
oauth2-proxy-google-oidc-secret-prole.example.yaml feat(auth): add Google Workspace OAuth (prole.org) for Grafana + Supabase Studio 2026-05-06 16:22:49 -04:00
oauth2-proxy-google-oidc-secret.example.yaml Merge claude/crazy-bose-fec256 into main 2026-05-01 16:39:10 -07:00
workload-identity.yaml fix(cnpg): stabilize CNPG/Barman Cloud init on GKE (knoe-dev-0 / knoe-db-0) 2026-04-05 02:04:11 -07:00