[EAI-7305]: Remove cluster-auth from the stack

docs/openshift/install.sh

@@ -427,15 +427,6 @@ echo "✅ Sources extracted to ${SOURCES_DIR}"
 # Apply fixes to cloned sources that have not yet been merged upstream.
 # ============================================================================
 
-# Fix: SecurityPolicy extAuth.failOpen must be true for standalone installs.
-# Without this, Envoy returns HTTP 500 on every request because it cannot reach
-# the gRPC ext-auth service on port 50051 (cluster-auth shim is REST on 8081).
-EXTAUTH_TPL="${SOURCES_DIR}/envoy-gateway-config/templates/security-policy-extauth.yaml"
-if ! grep -q "failOpen" "${EXTAUTH_TPL}" 2>/dev/null; then
-  sed -i 's/  extAuth:/  extAuth:\n    failOpen: true/' "${EXTAUTH_TPL}"
-  echo "✅ Patched envoy-gateway-config SecurityPolicy: failOpen=true"
-fi
-
 # --- envoy-gateway-config, for the AI gateway on OpenShift -------------------
 # The chart is written for RKE2: a LoadBalancer apps gateway owning the whole
 # domain, and ordinary node sizes. Three lines have to change here. Patching the

root/values.yaml

@@ -321,22 +321,6 @@ apps:
     syncWave: -40
     valuesObject:
       installCRDs: true
-  cluster-auth:
-    namespace: cluster-auth
-    path: cluster-auth/0.5.9
-    syncWave: -25
-    valuesFile: values.yaml
-  cluster-auth-config:
-    ignoreDifferences:
-      - group: external-secrets.io
-        jqPathExpressions:
-          - ".spec.data[].remoteRef.conversionStrategy"
-          - ".spec.data[].remoteRef.decodingStrategy"
-          - ".spec.data[].remoteRef.metadataPolicy"
-        kind: ExternalSecret
-    namespace: cluster-auth
-    path: cluster-auth-config
-    syncWave: -20
   cnpg-operator:
     namespace: cnpg-system
     path: cnpg-operator/0.26.0

root/values_large.yaml

@@ -16,8 +16,6 @@ enabledApps:
   - argocd
   - argocd-config
   - cert-manager
-  - cluster-auth
-  - cluster-auth-config
   - cnpg-operator
   - external-secrets
   - external-secrets-config

root/values_medium.yaml

@@ -18,8 +18,6 @@ enabledApps:
   - argocd
   - argocd-config
   - cert-manager
-  - cluster-auth
-  - cluster-auth-config
   - cnpg-operator
   - external-secrets
   - external-secrets-config
@@ -258,12 +256,6 @@ apps:
         requests:
           cpu: "5m"
           memory: "256Mi"
-  cluster-auth:
-    valuesObject:
-      resources:
-        requests:
-          cpu: "100m"
-          memory: "256Mi"
   cnpg-operator:
     valuesObject:
       resources:

root/values_small.yaml

@@ -23,8 +23,6 @@ enabledApps:
   - argocd
   - argocd-config
   - cert-manager
-  - cluster-auth
-  - cluster-auth-config
   - cnpg-operator
   - external-secrets
   - external-secrets-config

sbom/components.yaml

@@ -128,14 +128,6 @@ components:
     projectUrl: https://github.com/cert-manager/cert-manager
     license: Apache License 2.0
     licenseUrl: https://github.com/cert-manager/cert-manager/blob/master/LICENSE
-  cluster-auth:
-    path: cluster-auth/0.5.9
-    type: helm
-    valuesFile: values.yaml
-    sourceUrl: https://github.com/silogen/cluster-forge/tree/main/sources/cluster-auth
-    projectUrl: https://github.com/silogen/cluster-forge/tree/main/sources/cluster-auth
-    license: Apache License 2.0
-    licenseUrl: https://github.com/silogen/cluster-forge/blob/main/LICENSE
   cnpg-operator:
     path: cnpg-operator/0.26.0
     type: helm