5 Commits

Include renames

Author	SHA1	Message	Date
olb042	a2036c8381	fix: proxy.headers xforwarded not forwarded - Traefik sends X-Forwarded-* headers ... Keycloak was seeing requests as non-secure (HTTP) because it was expecting the RFC 7239 Forwarded: header but Traefik sends X-Forwarded-Proto/For/Host. This caused CSP failures and cookie security warnings.	2026-05-11 00:27:13 +01:00
olb042	716ad61115	fix: remove hostname.admin field - not a valid URL format in KC v26 ... Keycloak v26 hostname-admin expects a full URL (https://...) not bare hostname. Dropping it so KC defaults admin to the same as the main hostname.	2026-05-11 00:15:50 +01:00
olb042	746c50ae0a	fix: bootstrapAdmin.user.secret is a string, not a nested object	2026-05-10 23:16:52 +01:00
olb042	67b1916012	fix: three blocking issues preventing login stack from starting ... - keycloak-instance: bootstrapAdminSpec -> bootstrapAdmin (correct CRD field) - cnpg-cluster: remove barman-cloud plugin block (BarmanObjectStore CRD absent) - operator/kustomization: patch WATCH_NAMESPACES=login so operator reconciles login ns	2026-05-10 23:14:56 +01:00
olb042	6f29be2987	feat: initial scaffold from helm-template ... - Keycloak Operator v26 deployed to keycloak-system namespace - Keycloak HA instance (2 replicas, jdbc-ping cluster discovery) - Dedicated CNPG cluster (local-postgres storage, 2 instances) - KeycloakRealmImport: home-lab realm with groups and traefik-oidc client - Traefik IngressRoute: login.olb42.com (CF Access bypass) - Admin credentials placeholder (seal before first deploy) - ArgoCD ApplicationSets: login-operator + login	2026-05-10 22:32:49 +01:00