base/lasuite/meet-config.yaml

apiVersion: v1
kind: ConfigMap
metadata:
  name: meet-config
  namespace: lasuite
data:
  DJANGO_CONFIGURATION: Production
  DJANGO_SETTINGS_MODULE: meet.settings
  DJANGO_ALLOWED_HOSTS: meet.DOMAIN_SUFFIX
  DJANGO_CSRF_TRUSTED_ORIGINS: https://meet.DOMAIN_SUFFIX
  DB_NAME: meet_db
  DB_USER: meet
  AWS_STORAGE_BUCKET_NAME: sunbeam-meet
  LIVEKIT_API_URL: https://livekit.DOMAIN_SUFFIX
feat(infra): Meet integration, La Suite theming, Pingora SSH + meet routes Meet: add backend/frontend/celery deployments and services, meet-config ConfigMap, nginx SPA config, VSO secrets (meet-db-credentials VDS, meet-django-secret and meet-livekit VSS). Wire oidc-meet OAuth2Client. La Suite overlay discipline: move people/docs frontend nginx ConfigMaps and patches from overlays/local to base so both environments share them. Remove values-ory.yaml (folded into base). Add docs-frontend nginx config with sub_filter theming. Add local gitea mkcert CA patch. Pingora: add [ssh] TCP passthrough block (port 22 → Gitea SSH pod) and split meet route into frontend default + backend paths for /api/, /admin/, /oidc/, /static/, /__. Remove now-unused values-pingora.yaml from production overlay (host ports moved to patch-pingora-hostport.yaml). Update both overlay kustomizations to reference all new resources and add meet-backend/meet-frontend image entries. 2026-03-06 12:08:21 +00:00			`apiVersion: v1`
			`kind: ConfigMap`
			`metadata:`
			`name: meet-config`
			`namespace: lasuite`
			`data:`
			`DJANGO_CONFIGURATION: Production`
			`DJANGO_SETTINGS_MODULE: meet.settings`
Fix meet: ALLOWED_HOSTS, OIDC callback, and LiveKit connectivity - meet-config: rename ALLOWED_HOSTS → DJANGO_ALLOWED_HOSTS (django-configurations ListValue uses DJANGO_ prefix by default; without it the list was empty and every browser request got 400 DisallowedHost) - meet-config: set LIVEKIT_API_URL to public https://livekit.DOMAIN_SUFFIX so the meet frontend can reach LiveKit for WebSocket signaling - pingora-config: add livekit.DOMAIN_SUFFIX → livekit-server:80 WebSocket route - cert-manager: add livekit.DOMAIN_SUFFIX to TLS cert dnsNames - oidc-clients: fix meet redirect URI /oidc/callback/ → /api/v1.0/callback/ (meet embeds mozilla-django-oidc inside the api/v1.0/ prefix); add postLogoutRedirectUri for clean logout - livekit-values: replace hardcoded devkey:secret-placeholder with key_file loaded from a VSO-managed K8s Secret (secret/livekit in OpenBao) - media/vault-secrets: add VaultAuth + VaultStaticSecret for media namespace to sync livekit API credentials from OpenBao 2026-03-06 13:56:29 +00:00			`DJANGO_ALLOWED_HOSTS: meet.DOMAIN_SUFFIX`
feat(infra): Meet integration, La Suite theming, Pingora SSH + meet routes Meet: add backend/frontend/celery deployments and services, meet-config ConfigMap, nginx SPA config, VSO secrets (meet-db-credentials VDS, meet-django-secret and meet-livekit VSS). Wire oidc-meet OAuth2Client. La Suite overlay discipline: move people/docs frontend nginx ConfigMaps and patches from overlays/local to base so both environments share them. Remove values-ory.yaml (folded into base). Add docs-frontend nginx config with sub_filter theming. Add local gitea mkcert CA patch. Pingora: add [ssh] TCP passthrough block (port 22 → Gitea SSH pod) and split meet route into frontend default + backend paths for /api/, /admin/, /oidc/, /static/, /__. Remove now-unused values-pingora.yaml from production overlay (host ports moved to patch-pingora-hostport.yaml). Update both overlay kustomizations to reference all new resources and add meet-backend/meet-frontend image entries. 2026-03-06 12:08:21 +00:00			`DJANGO_CSRF_TRUSTED_ORIGINS: https://meet.DOMAIN_SUFFIX`
			`DB_NAME: meet_db`
			`DB_USER: meet`
			`AWS_STORAGE_BUCKET_NAME: sunbeam-meet`
Fix meet: ALLOWED_HOSTS, OIDC callback, and LiveKit connectivity - meet-config: rename ALLOWED_HOSTS → DJANGO_ALLOWED_HOSTS (django-configurations ListValue uses DJANGO_ prefix by default; without it the list was empty and every browser request got 400 DisallowedHost) - meet-config: set LIVEKIT_API_URL to public https://livekit.DOMAIN_SUFFIX so the meet frontend can reach LiveKit for WebSocket signaling - pingora-config: add livekit.DOMAIN_SUFFIX → livekit-server:80 WebSocket route - cert-manager: add livekit.DOMAIN_SUFFIX to TLS cert dnsNames - oidc-clients: fix meet redirect URI /oidc/callback/ → /api/v1.0/callback/ (meet embeds mozilla-django-oidc inside the api/v1.0/ prefix); add postLogoutRedirectUri for clean logout - livekit-values: replace hardcoded devkey:secret-placeholder with key_file loaded from a VSO-managed K8s Secret (secret/livekit in OpenBao) - media/vault-secrets: add VaultAuth + VaultStaticSecret for media namespace to sync livekit API credentials from OpenBao 2026-03-06 13:56:29 +00:00			`LIVEKIT_API_URL: https://livekit.DOMAIN_SUFFIX`