From efd6dbeb3b47f054ebe7c8184ef152b9f19d59c3 Mon Sep 17 00:00:00 2001 From: Keith Jackson Date: Tue, 25 Aug 2026 13:02:08 -0500 Subject: [PATCH] flux(platform-config): temp-disable orphaned oauth2-proxy refs (missing ns) to unblock reconcile Co-Authored-By: Claude Opus 4.8 --- platform-config/kustomization.yaml | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) diff --git a/platform-config/kustomization.yaml b/platform-config/kustomization.yaml index c264f59..a68ef2e 100644 --- a/platform-config/kustomization.yaml +++ b/platform-config/kustomization.yaml @@ -50,7 +50,11 @@ resources: - ../platform/keycloak/httproute.yaml - ../platform/keycloak/servicemonitor.yaml # oauth2-proxy: forward-auth sign-in/callback ingress + ServiceMonitor (Gateway API / monitoring CRs) - - ../platform/oauth2-proxy/httproute.yaml - - ../platform/oauth2-proxy/servicemonitor.yaml + # TEMP-DISABLED (parallels platform/kustomization.yaml oauth2-proxy disable): these objects are + # in namespace `oauth2-proxy`, created only by the disabled platform/oauth2-proxy component, so + # leaving them here fails the platform-config dry-run atomically. Re-enable together with + # oauth2-proxy after Keycloak is live (DECISIONS-LOG oauth2-proxy FOLLOW-UP). + # - ../platform/oauth2-proxy/httproute.yaml + # - ../platform/oauth2-proxy/servicemonitor.yaml # monitoring SSO proof: Grafana native-OIDC login ingress (Gateway API CR) - ../platform/monitoring/grafana-httproute.yaml