Commit Graph

14 Commits

Author SHA1 Message Date
Nikholas Pcenicni
7c9fd1fde6 Enhance Headlamp's metrics access by updating the ClusterRoleBinding to include permissions for metrics.k8s.io, nodes, and CustomResourceDefinitions. Update README and RBAC documentation to clarify OIDC user permissions and troubleshooting steps for metrics visibility issues. 2026-05-14 19:24:44 -04:00
Nikholas Pcenicni
bb0bd4ca90 Update OIDC configuration in Headlamp documentation and Talos config to use preferred_username claim instead of email. Added troubleshooting steps for "Unauthorized" errors related to OIDC token validation. 2026-05-14 19:15:47 -04:00
Nikholas Pcenicni
817849ee3c Add CA certificates bundle and update Headlamp configuration for OIDC 2026-05-14 18:59:47 -04:00
Nikholas Pcenicni
2321209626 Update Helm chart versions across multiple components to latest stable releases, including Argo CD (9.5.14), cert-manager (v1.20.2), Cilium (1.19.4), kube-prometheus-stack (85.0.3), Loki (7.0.0), Fluent Bit (0.57.5), Headlamp (0.42.0), Traefik (40.2.0), and Kyverno (3.8.0). Adjusted related documentation and values files to reflect these changes for improved deployment consistency and compatibility. 2026-05-14 18:55:18 -04:00
Nikholas Pcenicni
95b1866144 Update .gitignore to exclude all .tmp files and enhance clarity in middleware-https-proto.yaml by adding X-Forwarded-Host and X-Forwarded-Port headers for improved redirect handling in Headlamp. 2026-05-14 18:35:49 -04:00
Nikholas Pcenicni
86df02f9bd Update Traefik Ingress middleware reference in values.yaml for Headlamp to align with CRD naming conventions and improve documentation clarity. 2026-05-14 18:31:27 -04:00
Nikholas Pcenicni
af3ab32de8 Add middleware-https-proto.yaml to enforce HTTPS scheme for Headlamp and update kustomization.yaml and values.yaml accordingly 2026-05-14 18:27:42 -04:00
Nikholas Pcenicni
1a50599cb4 Enhance Authentik role by updating README with detailed troubleshooting steps for Headlamp OIDC integration, including handling of scopes and PKCE settings. Adjust default variables for Headlamp OIDC scopes and ensure proper application of Kubernetes RBAC for OIDC groups. Update Helm tasks to apply necessary static manifests for Headlamp, improving overall deployment and authentication reliability. 2026-05-14 16:11:57 -04:00
Nikholas Pcenicni
c392ce1e5a Enhance Authentik integration in noble cluster setup by adding support for OAuth2 flow primary keys in configuration. Update README with troubleshooting steps for common API errors and improve deployment reliability with tasks to wait for Authentik worker rollout and API readiness. Adjust Helm chart values for Grafana and Headlamp to accommodate new OIDC settings, ensuring seamless authentication and authorization processes. 2026-05-14 01:29:49 -04:00
Nikholas Pcenicni
78b524a044 Add Authentik and oauth2-proxy support to noble cluster setup, including environment variables, playbook tags, and landing URLs. Update README and kustomization.yaml to reflect new OIDC integration, enhancing security and user authentication capabilities. 2026-05-14 00:23:48 -04:00
Nikholas Pcenicni
61895ddf31 Remove namespace.yaml from Headlamp kustomization to prevent SharedResourceWarning due to multiple Applications owning the same Namespace. 2026-05-13 17:50:28 -04:00
Nikholas Pcenicni
e448e6264e Add new repository configuration for Headlamp in Argo CD application manifest to enhance deployment management and streamline application synchronization. 2026-05-13 17:47:21 -04:00
Nikholas Pcenicni
76eb7df18c Refactor noble cluster configurations to transition from the deprecated apps structure to a streamlined bootstrap approach. Update paths in various YAML files and README documentation to reflect the new organization under clusters/noble/bootstrap. This change enhances clarity and consistency across the deployment process, ensuring that all components are correctly referenced and documented for user guidance. 2026-03-28 17:03:15 -04:00
Nikholas Pcenicni
90fd8fb8a6 Refactor noble cluster configurations by removing deprecated Argo CD application management files and transitioning to a streamlined Ansible-driven installation approach. Update kustomization.yaml files to reflect the new structure, ensuring clarity on resource management. Introduce new namespaces and configurations for cert-manager, external-secrets, and logging components, enhancing the overall deployment process. Add detailed README.md documentation for each component to guide users through the setup and management of the noble lab environment. 2026-03-28 17:02:50 -04:00