Commit graph

426 commits

Author SHA1 Message Date
127da7ab2b
updated forgejo image to test garm 2025-08-28 15:05:41 +02:00
Automated pipeline
f4c0402041 Automated upload for garm-test.t09.de 2025-08-27 10:06:25 +00:00
Automated pipeline
68a284fc33 Automated upload for final-test.t09.de 2025-08-21 12:59:06 +00:00
Automated pipeline
ac4d7a38b5 Automated upload for observability.t09.de 2025-08-18 09:17:25 +00:00
3f893854a4 feat(vmuser): use secret instead of hardcoded value for vmuser authentication 2025-08-18 10:42:12 +02:00
a91580c73f feat(argocd) add policy for group DevFW 2025-08-15 14:32:05 +02:00
ed72b88472 fix(argocd): use colon again 2025-08-15 14:02:37 +02:00
443b5a3fee fix(argocd) replace colon with dot 2025-08-15 13:54:14 +02:00
8f9ce344fb fix(argocd): undo change clientSecret 2025-08-15 13:50:52 +02:00
c92330770d fix(argocd): use plain secret 2025-08-15 13:46:52 +02:00
f27fe2d111 fix(argocd): fix redirect url for dex 2025-08-15 13:41:48 +02:00
f8c887da56 fix(argocd): remove requestedIDTokenClaims 2025-08-15 13:37:45 +02:00
3bb78f45be feat(sso): introduce argocd sso config 2025-08-15 13:28:07 +02:00
Automated pipeline
90db53ee4d Automated upload for observability.t09.de 2025-08-15 09:14:11 +00:00
Automated pipeline
1141f12f95 Automated upload for edp.buildth.ing 2025-08-15 09:03:04 +00:00
Your Name
9d2c3f7de9 feat(sso): added injection of the client secret to grafana 2025-08-15 09:46:49 +02:00
cbc8752fa1 feat(sso): using secret references in dex to not put secrets in git 2025-08-14 16:03:39 +02:00
bab179a272
feat(dex): 🔒 Dex now only pulls org roles 2025-08-13 16:21:21 +02:00
d86621b59b
fix(dex): 🚑 Fixed Grafana OIDC 2025-08-13 16:15:19 +02:00
0c3b2215ce
feat(config): Add loadAllGroups configuration option
Adds a new configuration option `loadAllGroups` to enable loading all groups in the Dex settings.

This improves user management by ensuring all groups are available for authorization.
2025-08-13 16:11:26 +02:00
b85a68267e
feat(values): Add LOG_LEVEL environment variable
Add a new environment variable `LOG_LEVEL` set to `debug` to enhance logging capabilities for the application, aiding in debugging and observability.
2025-08-13 15:56:40 +02:00
3fc36dcfe2
feat(manifests): Add debug log level for Grafana configuration
Enhances Grafana configuration by adding a debug log level.

This improvement aids in troubleshooting and monitoring by providing more detailed logging information.
2025-08-13 15:45:32 +02:00
b87567568d
fix: 🔧 Correct role attribute path casing in Grafana config
Correct the casing of the 'DevFW' group reference in the role attribute path to 'devfw' for consistency and to ensure proper access control in Grafana.
2025-08-13 15:26:32 +02:00
9dab4ea0c8
feat(grafana): Enhance role assignment for Grafana users
Add support for assigning both 'GrafanaAdmin' and 'Editor' roles through the `role_attribute_path`.

Enable the option to allow assignment of Grafana Admin roles directly, enhancing user management capabilities.
2025-08-13 15:23:56 +02:00
9f0b64b7a4
fix(grafana): 🔧 Update role attribute for Grafana access
Updates the role attribute path in the Grafana manifest to specify 'GrafanaAdmin' instead of 'Admin' for user group permissions. This change improves access control by aligning roles with Grafana's intended user management.
2025-08-13 15:20:52 +02:00
a9f7b0c95b
fix(grafana): 🔧 Update role attribute path for OAuth
Update the role attribute path to specify that users in the 'DevFW' group will be assigned the 'Admin' role in the Grafana configuration.

This change enhances user role management for improved access control.
2025-08-13 15:17:33 +02:00
61dddfa961
fix(auth): 🔒️ Update redirect URIs for OAuth clients
Removes the public client configuration and updates the Grafana redirect URI to the correct domain.

Modifies OAuth scopes to include groups for improved permission management.
2025-08-13 15:14:11 +02:00
4425643af8
fix(grafana): 🔧 Update redirect URI for OAuth login
Update the redirect URI to use localhost for OAuth login, improving local development and testing capabilities.
2025-08-13 15:07:54 +02:00
48070d3cc2
fix(config): 🔒 Update Grafana redirect URI for local testing
Update the Grafana redirect URI to point to localhost for local testing purposes.

This change allows developers to test authentication workflows without needing to connect to the live environment.
2025-08-13 15:05:10 +02:00
731cf160a9
feat(config): Add public client configuration to Dex
Adds a new public client configuration to Dex with a specified ID, name, and redirect URIs.

This enhancement allows for public access to Dex, enabling easier integration with external applications.
2025-08-13 15:02:08 +02:00
cd2e6de499
feat(grafana): 🎉 Enable user sign-up via OAuth
Allow users to sign up through Forgejo OAuth by setting `allow_sign_up` to true. This change enhances user accessibility and engagement with the Grafana platform.
2025-08-13 14:51:11 +02:00
f3d2def98a
fix(config): 🔧 Update Forgejo client credentials format
Refactor the configuration to use environment variable syntax for Forgejo client ID and secret.

This change improves consistency and readability in the configuration file.
2025-08-13 14:42:35 +02:00
f9b3b69b67
fix(grafana): 🔒 Remove unnecessary role scope from OAuth
Remove the 'roles' scope from the Grafana OAuth configuration to streamline authentication requirements. This change enhances security by limiting access scopes to only what's necessary.
2025-08-13 14:39:14 +02:00
22c5ff75c8
fix: 🔒️ Remove sensitive role attribute path from config
Remove the role attribute path from Grafana configuration to enhance security by preventing exposure of user role mappings. This change ensures that sensitive information remains protected while maintaining functionality.
2025-08-13 14:38:34 +02:00
c12d21e5bb
feat(grafana): 🎨 Add root_url configuration for server
Adds a root_url configuration for the Grafana server to ensure proper access through the specified URL.

This change enhances the setup by defining the server's root URL, improving accessibility and usability for users.
2025-08-13 14:31:26 +02:00
a344242bd5
refactor(auth): 🔧 Update authentication configuration to use strings
Refactors the authentication settings in the Grafana configuration to use string values for boolean flags and nested properties.

This change enhances consistency and may improve compatibility with other components expecting string representations.
2025-08-13 14:28:40 +02:00
a82d027f81
refactor(auth): 🔧 Simplify OAuth configuration structure
Refactors the OAuth configuration in the Grafana manifest by restructuring the indentation for clarity and organization. This change enhances readability and maintainability of the authentication settings without altering functionality.
2025-08-13 14:24:24 +02:00
ae26ec6a42
fix(auth): 🔒️ Update OAuth client secret and configurations
Update the OAuth client secret for Grafana and add new configurations for generic OAuth authentication.

These changes enhance security and streamline the authentication process for Grafana by enabling OAuth with specific settings.
2025-08-13 14:21:29 +02:00
d40a6fb850
feat(alerts): 🎉 Add alert for high disk consumption in Forgejo
Add a new alert for monitoring high disk consumption in the Forgejo environment.

This alert triggers when disk usage exceeds 60% for persistent volume claims, enhancing observability and proactive resource management in the cluster.
2025-08-13 13:24:31 +02:00
b1b565243c
feat(dex): readded dex after pipeline run 2025-08-13 13:11:16 +02:00
Automated pipeline
d10f650e99 Automated upload for observability.t09.de 2025-08-13 09:33:50 +00:00
a2fcd2ed29
Merge branch 'main' of ssh://edp.buildth.ing/DevFW-CICD/stacks-instances 2025-08-13 11:09:28 +02:00
b6fbfc0381
fix(dex): fixed ingress class name 2025-08-13 11:09:20 +02:00
Automated pipeline
ca87065490 Automated upload for delete-me.t09.de 2025-08-13 09:05:33 +00:00
12eeb98118
fix(dex): fixed ingress 2025-08-13 11:05:12 +02:00
2b0c062a2a
Merge branch 'main' of ssh://edp.buildth.ing/DevFW-CICD/stacks-instances 2025-08-13 10:59:20 +02:00
54eb8164f4
feat(dex): Added dex to observability cluster for testing 2025-08-13 10:58:48 +02:00
Your Name
9087b823a1 feat(edp): changed disck-volume-type from SATA to GPSSD in observability cluster 2025-08-13 10:50:05 +02:00
Automated pipeline
3bb4d1cb60 Automated upload for forgejo-test.t09.de 2025-08-13 08:26:49 +00:00
Automated pipeline
ec5a7b43c9 Automated upload for edp.buildth.ing 2025-08-13 08:10:15 +00:00