20 Commits

Author SHA1 Message Date
Vaibhav Pathak
c29e1fce46 Fix CloudSQL proxy labels to not match Backstage service selector
The CloudSQL proxy pod was using backstage.selectorLabels which made it
match the Backstage service selector (app.kubernetes.io/name: backstage,
app.kubernetes.io/instance: backstage). This caused Traefik to sometimes
route requests to the CloudSQL proxy instead of Backstage, resulting in
502 errors.

Changed pod labels to use distinct values (backstage-cloudsql-proxy)
so the pod is not selected by the Backstage service.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-02-12 16:36:03 +05:30
Vaibhav Pathak
68be5ed6f0 Argocd Proxy removed auth header 2026-02-06 14:11:34 +05:30
Vaibhav Pathak
f1902df69c Argocd Proxy added auth header 2026-02-06 14:01:33 +05:30
Vaibhav Pathak
b6190cb32e Github Proxy Added 2026-01-20 11:04:25 +05:30
Vaibhav Pathak
211d2d13de Github Token Mounted 2026-01-20 08:46:49 +05:30
Vaibhav Pathak
259a02b5bf Github Token Added 2026-01-20 08:30:15 +05:30
Vaibhav Pathak
2b37c2f04b Fix: github read allowed 2026-01-19 20:48:04 +05:30
Vaibhav Pathak
d49853219b pod log permission added 2026-01-19 14:48:27 +05:30
Vaibhav Pathak
987dbe4eaa Add GITEA_AUTH_HEADER env var to deployment
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-17 19:28:37 +05:30
Vaibhav Pathak
ad91cdf0b7 Add Gitea proxy endpoint for values file fetching
Adds /gitea/api proxy to access Gitea API for fetching Helm values files
in the environment provisioner.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-17 19:18:20 +05:30
Vaibhav Pathak
2156a78740 Add configurable allowed email domains for Google OAuth
- Add auth.allowedEmailDomains configuration
- Configure onlinesales.ai as allowed domain
- Remove signIn resolver config (moved to backend code)
- Add documentation comments

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
2026-01-16 14:39:42 +05:30
Vaibhav Pathak
403a16a21f catlog changes 2026-01-16 13:56:47 +05:30
Vaibhav Pathak
5804095ce2 Fix catalog URL to use /raw/ instead of /src/
- Change from /src/branch/main/ to /raw/branch/main/
- /src/ returns HTML, /raw/ returns raw YAML content
- Add back templates catalog location

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
2026-01-16 13:11:00 +05:30
Vaibhav Pathak
a96a2f1cf5 catlog changes 2026-01-16 13:02:29 +05:30
Vaibhav Pathak
9e9afef8c3 Add User/Group catalog support for Google OAuth
- Update catalog rules to allow User and Group entities
- Add osmos-org repository as catalog location
- Enables Google OAuth sign-in for users in org.yaml

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
2026-01-16 12:57:53 +05:30
4fa8fc4d31 Update templates/backstage-configmap.yaml 2026-01-16 05:52:08 +00:00
aab664222b Update templates/backstage-configmap.yaml 2026-01-16 05:11:49 +00:00
Backstage Deploy
369363277c Override default Keycloak auth with Google OAuth - mount config as app-config.yaml 2026-01-14 16:56:26 +05:30
Backstage Deploy
37151f75e9 Fix database SSL configuration - disable SSL for Cloud SQL Proxy connection 2026-01-14 16:17:55 +05:30
Backstage Deploy
eb39a1cd85 Initial Backstage Helm chart with ESO integration 2026-01-14 15:09:56 +05:30