Ho Ngoc Hai 8a5b25936d fix(auth): add bff-client to IdentityServer + fix pos-web auth ...

Login was failing because:
1. IdentityServer Config.cs had no 'bff-client' client definition
   (pos-web uses bff-client for BFF authentication pattern)
2. pos-web had no IdentityServer__ClientSecret env var configured
3. Network policy blocked pos-web → iam-service egress

Fixes:
- Add bff-client to Config.Clients (ResourceOwnerPassword grant,
  8h access token, 7d refresh token for POS sessions)
- Add IdentityServer client credentials to pos-web.yaml from secrets
- Add pos-web to allow-inter-service-egress network policy

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-04-11 22:22:37 +07:00

..

act-runner-rbac.yaml

fix(cicd): skip namespace apply (already exists) + add patch permission

2026-04-10 20:18:02 +07:00

ads-analytics-service.yaml

fix(k8s): add inter-service ingress policy + reduce CPU requests

2026-04-11 20:19:03 +07:00

ads-billing-service.yaml

fix(k8s): add inter-service ingress policy + reduce CPU requests

2026-04-11 20:19:03 +07:00

ads-manager-service.yaml

fix(k8s): add inter-service ingress policy + reduce CPU requests

2026-04-11 20:19:03 +07:00

ads-serving-service.yaml

fix(k8s): add inter-service ingress policy + reduce CPU requests

2026-04-11 20:19:03 +07:00

ads-tracking-service.yaml

fix(k8s): add inter-service ingress policy + reduce CPU requests

2026-04-11 20:19:03 +07:00

booking-service.yaml

fix(k8s): add inter-service ingress policy + reduce CPU requests

2026-04-11 20:19:03 +07:00

catalog-service.yaml

fix(k8s): add inter-service ingress policy + reduce CPU requests

2026-04-11 20:19:03 +07:00

chat-service.yaml

fix(k8s): add inter-service ingress policy + reduce CPU requests

2026-04-11 20:19:03 +07:00

configmap.yaml

fix(k8s): switch domains from goodgo.vn to techbi.org

2026-04-10 20:30:08 +07:00

fnb-engine.yaml

fix(k8s): add inter-service ingress policy + reduce CPU requests

2026-04-11 20:19:03 +07:00

gitea-sync-cronjob.yaml

feat(cicd): switch CI/CD from GitHub Actions to Gitea Actions

2026-04-10 20:03:19 +07:00

iam-service.yaml

fix(k8s): add inter-service ingress policy + reduce CPU requests

2026-04-11 20:19:03 +07:00

ingress.yaml

feat(infra): migrate POS System routing to Traefik v3

2026-04-11 21:40:12 +07:00

inventory-service.yaml

fix(k8s): add inter-service ingress policy + reduce CPU requests

2026-04-11 20:19:03 +07:00

membership-service.yaml

fix(k8s): add inter-service ingress policy + reduce CPU requests

2026-04-11 20:19:03 +07:00

merchant-service.yaml

fix(k8s): add inter-service ingress policy + reduce CPU requests

2026-04-11 20:19:03 +07:00

mining-service.yaml

fix(k8s): add inter-service ingress policy + reduce CPU requests

2026-04-11 20:19:03 +07:00

minio.yaml

fix(cicd): use Kaniko Jobs for building Docker images in Gitea Actions

2026-04-10 20:15:20 +07:00

mission-service.yaml

fix(k8s): add inter-service ingress policy + reduce CPU requests

2026-04-11 20:19:03 +07:00

mkt-facebook-service.yaml

fix(k8s): add inter-service ingress policy + reduce CPU requests

2026-04-11 20:19:03 +07:00

mkt-whatsapp-service.yaml

fix(k8s): add inter-service ingress policy + reduce CPU requests

2026-04-11 20:19:03 +07:00

mkt-x-service.yaml

fix(k8s): add inter-service ingress policy + reduce CPU requests

2026-04-11 20:19:03 +07:00

mkt-zalo-service.yaml

fix(k8s): add inter-service ingress policy + reduce CPU requests

2026-04-11 20:19:03 +07:00

namespace.yaml

feat: add order lifecycle integration tests (29 tests) and staging K8s deployment manifests

2026-03-06 13:56:03 +07:00

network-policy.yaml

fix(auth): add bff-client to IdentityServer + fix pos-web auth

2026-04-11 22:22:37 +07:00

order-service.yaml

fix(k8s): add inter-service ingress policy + reduce CPU requests

2026-04-11 20:19:03 +07:00

pos-web.yaml

fix(auth): add bff-client to IdentityServer + fix pos-web auth

2026-04-11 22:22:37 +07:00

promotion-service.yaml

fix(k8s): add inter-service ingress policy + reduce CPU requests

2026-04-11 20:19:03 +07:00

rabbitmq.yaml

feat(k8s): add full K8s staging deployment for all 25 services

2026-04-10 19:53:09 +07:00

redis-sentinel.yaml

fix(devops): resolve 4 P2 DevOps improvements (Wave 3 — TEC-263)

2026-03-23 09:54:32 +07:00

redis.yaml

feat: add order lifecycle integration tests (29 tests) and staging K8s deployment manifests

2026-03-06 13:56:03 +07:00

secrets.yaml

fix(k8s): switch domains from goodgo.vn to techbi.org

2026-04-10 20:30:08 +07:00

secrets.yaml.example

feat: add order lifecycle integration tests (29 tests) and staging K8s deployment manifests

2026-03-06 13:56:03 +07:00

setup-secrets.sh

feat(cicd): switch CI/CD from GitHub Actions to Gitea Actions

2026-04-10 20:03:19 +07:00

social-service.yaml

fix(k8s): add inter-service ingress policy + reduce CPU requests

2026-04-11 20:19:03 +07:00

storage-service.yaml

fix(k8s): add inter-service ingress policy + reduce CPU requests

2026-04-11 20:19:03 +07:00

traefik.yaml

feat(infra): migrate POS System routing to Traefik v3

2026-04-11 21:40:12 +07:00

wallet-service.yaml

fix(k8s): add inter-service ingress policy + reduce CPU requests

2026-04-11 20:19:03 +07:00