infra

viktor/infra

Fork 0

Commit graph

Author	SHA1	Message	Date
Viktor Barzin	bcb1e7f79f	[ci skip] Fix setup script: handle sudo-less environments, add extra scopes	2026-02-17 22:27:03 +00:00
Viktor Barzin	87719a197d	[ci skip] Add one-command setup scripts to k8s-portal - Add /setup/script?os=mac and /setup/script?os=linux endpoints - Scripts install kubectl, kubelogin, write kubeconfig, update shell rc - Unprotected ingress for /setup/script (curl-able without auth) - Fix kubeconfig to include --oidc-extra-scope for email/profile/groups	2026-02-17 22:22:41 +00:00
Viktor Barzin	d0b39f1987	[ci skip] Implement multi-user Kubernetes access with OIDC - Add RBAC module (modules/kubernetes/rbac/) with admin, power-user, and namespace-owner roles, API server OIDC flags, and audit logging - Add self-service portal (modules/kubernetes/k8s-portal/) SvelteKit app with kubeconfig download and setup instructions - Configure Alloy to collect audit logs from kube-apiserver - Add Grafana dashboard for Kubernetes audit log visualization - Configure Authentik OIDC provider with groups scope mapping - Wire up k8s_users and ssh_private_key variables through module chain	2026-02-17 21:42:39 +00:00

Author

SHA1

Message

Date

Viktor Barzin

bcb1e7f79f

[ci skip] Fix setup script: handle sudo-less environments, add extra scopes

2026-02-17 22:27:03 +00:00

Viktor Barzin

87719a197d

[ci skip] Add one-command setup scripts to k8s-portal

- Add /setup/script?os=mac and /setup/script?os=linux endpoints
- Scripts install kubectl, kubelogin, write kubeconfig, update shell rc
- Unprotected ingress for /setup/script (curl-able without auth)
- Fix kubeconfig to include --oidc-extra-scope for email/profile/groups

2026-02-17 22:22:41 +00:00

Viktor Barzin

d0b39f1987

[ci skip] Implement multi-user Kubernetes access with OIDC

- Add RBAC module (modules/kubernetes/rbac/) with admin, power-user,
  and namespace-owner roles, API server OIDC flags, and audit logging
- Add self-service portal (modules/kubernetes/k8s-portal/) SvelteKit app
  with kubeconfig download and setup instructions
- Configure Alloy to collect audit logs from kube-apiserver
- Add Grafana dashboard for Kubernetes audit log visualization
- Configure Authentik OIDC provider with groups scope mapping
- Wire up k8s_users and ssh_private_key variables through module chain

2026-02-17 21:42:39 +00:00

3 commits