Andrei Kvapil fc64df21d6 feat(keycloak): add ingress.rootRedirect for the login host root ...

When set, the bare "/" of the login hostname 302-redirects to the given
hostname (e.g. the product dashboard) via the Gateway API HTTPRoute, instead
of reaching Keycloak — whose root redirects to the admin console, which is
undesirable on a public login host. Only the exact "/" is redirected; the
OIDC paths still reach Keycloak. Complements ingress.adminHost, which already
narrows the login route off "/". Opt-in, empty by default.

Assisted-By: Claude
Signed-off-by: Andrei Kvapil <andrei.kvapil@aenix.io>

2026-07-08 21:42:40 +02:00

..

apps

docs(apps/kubernetes): correct upgrade-safety mechanism from SSA to CAPI update-time defaulting

2026-07-08 10:08:26 +03:00

core

feat(release): immutable tags & rc→stable promotion (#2677) (#3017)

2026-07-07 17:46:06 +05:00

extra

feat(platform): migrate to etcd-operator v1alpha2

2026-07-06 14:41:33 +04:00

library

fix(cozy-lib,harbor,mariadb): digest-pin cleanup-hook kubectl image and route it through cozy-lib.images-registry

2026-07-02 17:44:59 +03:00

system

feat(keycloak): add ingress.rootRedirect for the login host root

2026-07-08 21:42:40 +02:00

tests/cozy-lib-tests

feat(cozy-lib): add CA-only TLS trust-anchor helper for tenants

2026-06-23 03:12:17 +03:00