akadmin/Funk-lab
1
0
Fork 0
mirror of https://github.com/Alkatrazz24/Funk-lab.git synced 2026-07-12 22:44:43 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions

feat(auth): annuaire Authentik + portail consoles Guacamole

Browse source 
- k8s/apps/authentik : IdP OIDC (auth.lab.local), namespace auth —
  server + worker 2026.5.3, Redis in-cluster, PG sur storage-01, PVC media
- k8s/apps/guacamole : portail consoles SSH web s01/g01 (portail.lab.local) —
  guacd + webapp 1.6.0, SSO OIDC vers Authentik, Job initdb idempotent
- ansible : rôle console_user (user sans sudo pour les consoles, s01 + g01),
  bases PG authentik/guacamole, secrets vault (mdp PG + clé SSH console)
- doc : admin/k8s/auth-portal.md (déploiement, config initiale, pièges)

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
This commit is contained in:
alkatrazz 2026-07-06 21:19:23 +02:00
parent 09ca0be469
commit edf4a6294d
21 changed files with 775 additions and 64 deletions
Download patch file Download diff file Expand all files Collapse all files

1
ansible/playbooks/gpu-01.yml
View file

@ -9,3 +9,4 @@
- { role: llama_server, tags: [llama_server] }
- { role: node_exporter, tags: [node_exporter] }
- { role: satisfactory_server, tags: [satisfactory_server] }
- { role: console_user, tags: [console_user] }

1
ansible/playbooks/storage-01.yml
View file

@ -18,3 +18,4 @@
- { role: postfix_relay, tags: [postfix_relay] }
- { role: hermes_auto_improve, tags: [hermes_auto_improve] }
- { role: hermes_exec, tags: [hermes_exec] }
- { role: console_user, tags: [console_user] }