finn/homelab
Watch
2
0
Fork
You've already forked homelab
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Add SealSkin access for PR previews #21

Merged
finn merged 2 commits from feat/sealskin-preview-access into main 2026-10-27 04:20:19 +00:00
Conversation 0 Commits 2 Files changed 15 +745 -1
finn commented 2026-10-27 04:18:09 +00:00
Owner

Summary

  • Deploy SealSkin behind Authentik with webtop-admins and webtop-users roles.
  • Route each path-based preview through an in-cluster hostname as well as its public URL.
  • Print a user-initiated SealSkin launcher link after preview deployment; CI does not create sessions or handle SealSkin keys.
  • Document onboarding, access groups, and the preview workflow.

Validation

  • Terraform fmt and validate
  • 16 Node tests
  • Preview Helm renders for path and hostname routes
  • Authentik blueprint YAML and policy-mode assertion

No infrastructure was applied as part of this PR.

## Summary - Deploy SealSkin behind Authentik with webtop-admins and webtop-users roles. - Route each path-based preview through an in-cluster hostname as well as its public URL. - Print a user-initiated SealSkin launcher link after preview deployment; CI does not create sessions or handle SealSkin keys. - Document onboarding, access groups, and the preview workflow. ## Validation - Terraform fmt and validate - 16 Node tests - Preview Helm renders for path and hostname routes - Authentik blueprint YAML and policy-mode assertion No infrastructure was applied as part of this PR.
Add internal host aliases alongside public path-based previews and deploy a SealSkin browser session server behind Authentik. Document app roles and preview access paths.

Co-authored-by: Copilot <[email protected]>
Add user-initiated SealSkin preview launches
All checks were successful
terraform / check (pull_request) Successful in 18s
Details
8b22835b92 
Print a SealSkin launcher URL with each ready preview's internal hostname. Users launch a browser session after signing in, so CI does not need a SealSkin key or distribute session tokens.

Co-authored-by: Copilot <[email protected]>
finn merged commit 55a8b88711 into main 2026-10-27 04:20:19 +00:00
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels   
preview-bootstrap
Provision repository-scoped PR preview access

No labels
preview-bootstrap
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
finn/homelab!21
No description provided.