feat: grafana idm for zitadel (#74)

Signed-off-by: Devin Buhl <devin@buhl.casa>
This commit is contained in:
Devin Buhl
2026-06-26 10:13:30 -04:00
committed by GitHub
parent ab3b629f93
commit 1fe8e6439c
15 changed files with 66 additions and 45 deletions
+1 -1
View File
@@ -10,7 +10,7 @@ Envoy Gateway is the only external ingress. It runs one replica per worker with
### TLS certificates
cert-manager issues short-lived ECDSA P-256 wildcard certificates with always-rotate, using Let's Encrypt with the OVH DNS-01 challenge webhook. The certificate `dnsNames` are defined once in the base manifests using the `APP_DOMAIN`/`ALT_DOMAIN` placeholders and resolve per environment from `cluster-settings` — staging gets `*.staging.futostat.us` and `*.staging.futostatus.com`, production the bare-domain wildcards.
cert-manager issues short-lived ECDSA P-256 wildcard certificates with always-rotate, using Let's Encrypt with the OVH DNS-01 challenge webhook. The certificate `dnsNames` are defined once in the base manifests using the `APP_DOMAIN` placeholders and resolve per environment from `cluster-settings` — staging gets `*.staging.futostatus.com`, production the bare-domain wildcards.
## VictoriaMetrics — the central metrics store