Fixed
- The chart no longer publishes an unauthenticated muster.
ingress.enabledorgatewayAPI.enabledrendered a route whilemuster.oauth.server.enabledwas false (its default), and without OAuth muster serves every request as the syntheticdefault-user. The render now fails and names the switch;muster.oauth.server.acknowledgeUnauthenticatedExposure: trueallows it for a deliberately unauthenticated install behind a trusted proxy. agent-platform is unaffected: it enables OAuth and leaves both switches off. (#1071)