Andrei Kvapil 3fef40e9f7 [dashboard] Add keycloakInternalUrl for backend-to-backend OIDC requests (#2224) ...

## What this PR does

Adds `authentication.oidc.keycloakInternalUrl` platform value that
allows oauth2-proxy
in the dashboard to route backend calls (token exchange, JWKS, userinfo,
logout) through
an internal cluster URL while keeping browser redirects on the external
Keycloak URL.

When set, oauth2-proxy uses `--skip-oidc-discovery` and explicit
endpoint URLs pointing
to the internal Keycloak service. This avoids external DNS lookups and
TLS overhead for
pod-to-pod communication.

Fully backward-compatible: when the value is empty (default), behavior
is unchanged.

### Release note

```release-note
[dashboard] Added `authentication.oidc.keycloakInternalUrl` platform value to route oauth2-proxy backend requests through internal Keycloak service URL, bypassing external DNS and TLS.
```

<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->

## Summary by CodeRabbit

* **New Features**
* Added configuration support for an internal KeyCloak URL, enabling
backend authentication requests to be routed through an alternative
endpoint while maintaining existing external URLs for browser
interactions.

<!-- end of auto-generated comment: release notes by coderabbit.ai -->

2026-03-16 14:54:41 +01:00

..

flux-aio

Fix tolerations for uninitialized nodes

2026-01-19 14:20:02 +01:00

installer

Prepare release v1.1.0

2026-03-06 12:03:56 +00:00

platform

[dashboard] Add keycloakInternalUrl for backend-to-backend OIDC requests (#2224)

2026-03-16 14:54:41 +01:00

talos

Update Talos Linux v1.12.1

2026-01-19 10:57:14 +01:00

testing

Prepare release v1.1.0

2026-03-06 12:03:56 +00:00