infrastructure/auth
Infrastructure Admin 0dee133377 Add Argo Workflows, mTLS container registry, and fix infrastructure
- Move Keycloak off Helm to plain Crossplane Object manifests (PostgreSQL + Keycloak deployment)
- Add Vaultwarden SSO/OIDC config with Keycloak, fix Recreate deployment strategy for RWO volumes
- Switch routing from Helm-based Pomerium to pomerium-allinone with all service routes
- Deploy Argo Workflows (controller, server, CRDs, RBAC) with KEDA queue-depth autoscaling
- Add Civo cluster autoscaler with pool-scaler for zero-to-one scale-up via Civo API
- Add node-labeler to auto-tag nodes by pool membership for nodeSelector scheduling
- Set up mTLS container registry at registry.nge6.com (Forgejo built-in, client cert required)
- Add internal registry route (registry-internal.nge6.com) for in-cluster image pulls
- Fix DNS records for new Emissary LB IP (212.2.241.28)
- Fix CoreDNS crash from invalid custom config
- Fix Emissary apiext expired webhook CA certificate

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-04-07 21:23:12 -04:00
..
composite.yaml Initial infrastructure as code deployment 2025-09-23 08:43:06 -04:00
keycloak-provider-install.yaml Initial infrastructure as code deployment 2025-09-23 08:43:06 -04:00
keycloak-provider.yaml Initial infrastructure as code deployment 2025-09-23 08:43:06 -04:00
keycloak-resources.yaml Add Argo Workflows, mTLS container registry, and fix infrastructure 2026-04-07 21:23:12 -04:00
keycloak.yaml Add Argo Workflows, mTLS container registry, and fix infrastructure 2026-04-07 21:23:12 -04:00
kustomization.yaml Add kustomization.yaml files for subdirectories 2025-09-26 00:22:09 -04:00
resources.yaml Initial infrastructure as code deployment 2025-09-23 08:43:06 -04:00
secret.yaml Initial infrastructure as code deployment 2025-09-23 08:43:06 -04:00