muster release v5.34.5

Fixed

  • The chart no longer publishes an unauthenticated muster. ingress.enabled or gatewayAPI.enabled rendered a route while muster.oauth.server.enabled was false (its default), and without OAuth muster serves every request as the synthetic default-user. The render now fails and names the switch; muster.oauth.server.acknowledgeUnauthenticatedExposure: true allows it for a deliberately unauthenticated install behind a trusted proxy. agent-platform is unaffected: it enables OAuth and leaves both switches off. (#1071)