Dev - #1

Merged

ufukdev merged 13 commits into

mainfrom

Aug 27, 2026

Commits on Aug 27, 2026

fix(security): remove unrestricted webui egress, add privacy defaults and CIDR escape hatch
ufukdev
committed
4606f84
fix(security): scope DNS egress to kube-system to prevent DNS tunneling
ufukdev
committed
f939705
fix(security): pin OIDC redirect URIs to chat host and template sslRequired
ufukdev
committed
5c0cf37
feat(defaults): enable networkPolicy and litellm out of the box
ufukdev
committed
923543a
fix(naming): pin fullnameOverride to stabilize secret names across release names
ufukdev
committed
87c2d14
fix(chart): wire litellm config template, fix config-cli version, move images to values, drop dead webui-env
ufukdev
committed
8e84c9e
feat(ci): add secret stability test, OIDC/gateway helm tests, release workflow
ufukdev
committed
de0ee88
fix(sso): restore webui-env ConfigMap, wire extraEnvFrom, guard empty domain
ufukdev
committed
63dbafe
fix(ci): run all helm tests, fix external model name, scope OIDC test to internal KC
ufukdev
committed
3d64c10
fix(sso): use existingConfig hook, drop secretRef, clean ConfigMap, add default-values CI scenario
ufukdev
committed
a952017
fix(chart): pin subchart names, route via LiteLLM, fix tests and tooling
ufukdev
committed
94e18bc
fix(rag): wire RAG Ollama base URL, fix privacy env merge, fix litellm configmap key
ufukdev
committed
d524ace
fix(ci,sso): fix netpol scenario, Calico ordering, KC_HOSTNAME_URL, OIDC discovery URL
ufukdev
committed
eac428b