prole/deploy/opentofu/k3s/manifests/knoe/kustomization.yaml
chrisfu 9fe954d30e feat(auth): KNOE.LOCAL realm; prole-kerberos-ad-dc ExternalName svc; Gitea reverse proxy auth
- knoe-auth-kerberos-configmap.yaml: PROLE.LOCAL → KNOE.LOCAL
- prole-kerberos-ad-dc-svc.yaml: ExternalName Service for PROLE.ORG Samba AD KDC
- kustomization.yaml: register gitea-spnego-proxy + prole-kerberos-ad-dc-svc
- gitea/deploy.sh build_helm_values(): add service.ENABLE_REVERSE_PROXY_AUTHENTICATION,
  ENABLE_REVERSE_PROXY_AUTO_REGISTRATION, REVERSE_PROXY_TRUSTED_PROXIES=10.42.0.0/16

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-08 12:13:46 -07:00

33 lines
1.1 KiB
YAML

apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
resources:
- garage-configmap.yaml
- garage-statefulset.yaml
- garage-service.yaml
- knoe-configmap.yaml
- knoe-deployment.yaml
- knoe-service.yaml
- knoe-auth-deployment.yaml
- knoe-auth-service.yaml
- knoe-auth-kerberos-configmap.yaml
- knoe-kdc-configmap.yaml
- grafana-proxy-configmap.yaml
- grafana-proxy-deployment.yaml
- grafana-proxy-service.yaml
- openbao-statefulset.yaml
- openbao-service.yaml
- ingress.yaml
# prole.org migration — Kong (prole-svc-kong) replaces knoe-svc-kong
- prole-svc-kong-configmap.yaml
- kong-deployment.yaml
- kong-service.yaml
# prole.org ingress (*.prole.org → prole-svc-kong)
- prole-svc-ingress.yaml
# CNPG TCP ingress for direct PostgreSQL on db.internal.prole.org:5432
- knoe-db-postgres-tcp-ingress.yaml
# Gitea SPNEGO proxy (git.prole.org → PROLE.ORG Kerberos SSO → X-WEBAUTH-USER)
- gitea-spnego-proxy.yaml
# ExternalName Service for PROLE.ORG Samba AD KDC (myrddin.prole.org)
- prole-kerberos-ad-dc-svc.yaml