infra/stacks/k8s-dashboard
Viktor Barzin 1042c0f082 fix(k8s-dashboard): set RS256 signing_key on Authentik OIDC provider
Provider had signing_key=null → Authentik signed id_tokens with HS256 and
served an empty JWKS, so oauth2-proxy (and the apiserver) failed signature
verification (500 'failed to verify id token signature' on the callback).
Use the same 'authentik Self-signed Certificate' keypair the kubernetes
provider uses.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-06-05 09:19:09 +00:00
..
.terraform.lock.hcl Woodpecker CI deploy [CI SKIP] 2026-06-05 09:19:09 +00:00
authentik.tf fix(k8s-dashboard): set RS256 signing_key on Authentik OIDC provider 2026-06-05 09:19:09 +00:00
main.tf feat(k8s-dashboard): cut over ingress to oauth2-proxy SSO 2026-06-05 09:19:09 +00:00
oauth2_proxy.tf fix(k8s-dashboard): ignore Keel/tier drift on oauth2-proxy deployment 2026-06-05 09:19:09 +00:00
providers.tf feat(k8s-dashboard): add Authentik OIDC app for dashboard SSO 2026-06-05 09:19:07 +00:00
secrets [ci skip] Move Terraform modules into stack directories 2026-02-22 14:38:14 +00:00
terragrunt.hcl [ci skip] Phase 3: Create 66 service stacks and migrate state 2026-02-22 13:56:34 +00:00