🚨 CRIT alert -- Claude analysis inconclusive

[github-actions]

Claude could not determine a fix. Raw output:

I have enough to make the call. Here's my analysis:

**What fired:** The FuzeInfra `critlogdetect` alert rule (`helm/fuzeinfra/templates/configmaps-monitoring.yaml:478-490`) matches `{namespace=~".+"}` — i.e. **every** namespace, including application namespaces. It tripped on logs from `fuzefront/authentik-server`.

**Root cause of the logs:** authentik's embedded outpost (`ak-api-controller`) is failing to fetch its config:

Get "http://0.0.0.0:9000/api/v3/outposts/instances/": net/http: invalid header field value for "Authorization"

Go's HTTP client rejects an `Authorization` header value containing an invalid byte (control char / whitespace / newline). This is the classic symptom of an authentik outpost **token that was stored with a trailing newline or stray character** (e.g. a Secret created with `echo` instead of `echo -n`, or `AUTHENTIK_TOKEN`/bootstrap token pulled from a source with CRLF). The `http://0.0.0.0:9000` target also shows `AUTHENTIK_HOST` is unset, so it's hitting its own default.

**Boundary check:** `authentik` lives in the **`fuzefront` application namespace**, not FuzeInfra. Grep confirms this repo has **no** authentik manifests/secrets — only an unrelated comment in `terraform/contabo/cloudflare.tf:25`. Per CLAUDE.md, FuzeInfra is generic infra only; app repos own their own code and secrets. I **cannot make a concrete fix here** — the broken token is in fuzefront's chart/Secret.

This is not benign (the outpost is hard-down, retrying every 3s), and it's not fixable from this repo — it needs the fuzefront owners. So I'm raising an issue rather than guessing at a change in the wrong repo.

(Separately noted but not the firing alert: `argocd-server` ApplicationSet CRD missing — a different, lower-severity gap.)

{"action":"issue","title":"authentik outpost down in fuzefront: invalid Authorization header (malformed outpost token) — app-namespace error tripping FuzeInfra crit-log alert","body":"## Summary\nThe FuzeInfra `critlogdetect` alert fired on logs from **`fuzefront/authentik-server-75599696fb-rxhw6`**, not from FuzeInfra itself. authentik's embedded outpost controller cannot fetch its configuration and is retrying every 3s.\n\n## Evidence (logs, 11:13–11:15 UTC, 2026-06-26)\n```\n{\"error\":\"Get \\\"http://0.0.0.0:9000/api/v3/outposts/instances/\\\": net/http: invalid header field value for \\\"Authorization\\\"\",\"event\":\"Failed to fetch outpost configuration, retrying in 3 seconds\",\"logger\":\"authentik.outpost.ak-api-controller\",\"level\":\"error\"}\n```\nRepeating continuously every ~3s for the full 30-min window.\n\n## Root-cause hypothesis\nGo's `net/http` rejects an `Authorization` header whose value contains an invalid byte. The overwhelmingly common cause for authentik is an **outpost/API token stored with a trailing newline or stray control character** (e.g. a k8s Secret created via `echo \"$TOKEN\"` instead of `echo -n`, a CRLF-tainted value, or a token interpolated with surrounding whitespace

---

Log excerpt:

fuzefront/authentik-server-75599696fb-rxhw6: {"error":"Get \"http://0.0.0.0:9000/api/v3/outposts/instances/\": net/http: invalid header field value for \"Authorization\"","event":"Failed to fetch outpost configuration, retrying in 3 seconds","level":"error","logger":"authentik.outpost.ak-api-controller","timestamp":"2026-06-26T11:15:25Z"}
fuzefront/authentik-server-75599696fb-rxhw6: {"error":"Get \"http://0.0.0.0:9000/api/v3/outposts/instances/\": net/http: invalid header field value for \"Authorization\"","event":"Failed to fetch outpost configuration, retrying in 3 seconds","level":"error","logger":"authentik.outpost.ak-api-controller","timestamp":"2026-06-26T11:15:22Z"}
fuzefront/authentik-server-75599696fb-rxhw6: {"error":"Get \"http://0.0.0.0:9000/api/v3/outposts/instances/\": net/http: invalid header field value for \"Authorization\"","event":"Failed to fetch outpost configuration, retrying in 3 seconds","level":"error","logger":"authentik.outpost.ak-api-controller","timestamp":"2026-06-26T11:15:19Z"}
fuzefront/authentik-server-75599696fb-rxhw6: {"error":"Get \"http://0.0.0.0:9000/api/v3/outposts/instances/\": net/http: invalid header field value for \"Authorization\"","event":"Failed to fetch outpost configuration, retrying in 3 seconds","level":"error","logger":"authentik.outpost.ak-api-controller","timestamp":"2026-06-26T11:15:16Z"}
fuzefront/authentik-server-75599696fb-rxhw6: {"error":"Get \"http://0.0.0.0:9000/api/v3/outposts/instances/\": net/http: invalid header field value for \"Authorization\"","event":"Failed to fetch outpost configuration, retrying in 3 seconds","level":"error","logger":"authentik.outpost.ak-api-controller","timestamp":"2026-06-26T11:15:13Z"}
fuzefront/authentik-server-75599696fb-rxhw6: {"error":"Get \"http://0.0.0.0:9000/api/v3/outposts/instances/\": net/http: invalid header field value for \"Authorization\"","event":"Failed to fetch outpost configuration, retrying in 3 seconds","level":"error","logger":"authentik.outpost.ak-api-controller","timestamp":"2026-06-26T11:15:10Z"}
fuzefront/authentik-server-75599696fb-rxhw6: {"error":"Get \"http://0.0.0.0:9000/api/v3/outposts/instances/\": net/http: invalid header field value for \"Authorization\"","event":"Failed to fetch outpost configuration, retrying in 3 seconds","level":"error","logger":"authentik.outpost.ak-api-controller","timestamp":"2026-06-26T11:15:07Z"}
fuzefront/authentik-server-75599696fb-rxhw6: {"error":"Get \"http://0.0.0.0:9000/api/v3/outposts/instances/\": net/http: invalid header field value for \"Authorization\"","event":"Failed to fetch outpost configuration, retrying in 3 seconds","level":"error","logger":"authentik.outpost.ak-api-controller","timestamp":"2026-06-26T11:15:04Z"}
fuzefront/authentik-server-75599696fb-rxhw6: {"error":"Get \"http://0.0.0.0:9000/api/v3/outposts/instances/\": net/http: invalid header field value for \"Authorization\"","event":"Failed to fetch outpost configuration, retrying in 3 seconds","level":"error","logger":"authentik.outpost.ak-api-controller","timestamp":"2026-06-26T11:15:01Z"}
fuzefront/authentik-server-75599696fb-rxhw6: {"error":"Get \"http://0.0.0.0:9000/api/v3/outposts/instances/\": net/http: invalid header field value for \"Authorization\"","event":"Failed to fetch outpost configuration, retrying in 3 seconds","level":"error","logger":"authentik.outpost.ak-api-controller","timestamp":"2026-06-26T11:14:58Z"}
fuzefront/authentik-server-75599696fb-rxhw6: {"error":"Get \"http://0.0.0.0:9000/api/v3/outposts/instances/\": net/http: invalid header field value for \"Authorization\"","event":"Failed to fetch outpost configuration, retrying in 3 seconds","level":"error","logger":"authentik.outpost.ak-api-controller","timestamp":"2026-06-26T11:14:55Z"}
fuzefront/authentik-server-75599696fb-rxhw6: {"error":"Get \"http://0.0.0.0:9000/api/v3/outposts/instances/\": net/http: invalid header field value for \"Authorization\"","event":"Failed to fetch outpost configuration, retrying in 3 seconds","level":"error","logger":"authentik.outpost.ak-api-controller","timestamp":"2026-06-26T11:14:52Z"}
fuzefront/authentik-server-75599696fb-rxhw6: {"error":"Get \"http://0.0.0.0:9000/api/v3/outposts/instances/\": net/http: invalid header field value for \"Authorization\"","event":"Failed to fetch outpost configuration, retrying in 3 seconds","level":"error","logger":"authentik.outpost.ak-api-controller","timestamp":"2026-06-26T11:14:49Z"}
fuzefront/authentik-server-75599696fb-rxhw6: {"error":"Get \"http://0.0.0.0:9000/api/v3/outposts/instances/\": net/http: invalid header field value for \"Authorization\"","event":"Failed to fetch outpost configuration, retrying in 3 seconds","level":"error","logger":"authentik.outpost.ak-api-controller","timestamp":"2026-06-26T11:14:46Z"}
fuzefront/authentik-server-75599696fb-rxhw6: {"error":"Get \"http://0.0.0.0:9000/api/v3/outposts/instances/\": net/http: invalid header field value for \"Authorization\"","event":"Failed to fetch outpost configuration, retrying in 3 seconds","level":"error","logger":"authentik.outpost.ak-api-controller","timestamp":"2026-06-26T11:14:43Z"}
fuzefront/authentik-server-75599696fb-rxhw6: {"error":"Get \"http://0.0.0.0:9000/api/v3/outposts/instances/\": net/http: invalid header field value for \"Authorization\"","event":"Failed to fetch outpost configuration, retrying in 3 seconds","level":"error","logger":"authentik.outpost.ak-api-controller","timestamp":"2026-06-26T11:14:40Z"}
fuzefront/authentik-server-75599696fb-rxhw6: {"error":"Get \"http://0.0.0.0:9000/api/v3/outposts/instances/\": net/http: invalid header field value for \"Authorization\"","event":"Failed to fetch outpost configuration, retrying in 3 seconds","level":"error","logger":"authentik.outpost.ak-api-controller","timestamp":"2026-06-26T11:14:37Z"}
fuzefront/authentik-server-75599696fb-rxhw6: {"error":"Get \"http://0.0.0.0:9000/api/v3/outposts/instances/\": net/http: invalid header field value for \"Authorization\"","event":"Failed to fetch outpost configuration, retrying in 3 seconds","level":"error","logger":"authentik.outpost.ak-api-controller","timestamp":"2026-06-26T11:14:34Z"}
fuzefront/authentik-server-75599696fb-rxhw6: {"error":"Get \"http://0.0.0.0:9000/api/v3/outposts/instances/\": net/http: invalid header field value for \"Authorization\"","event":"Failed to fetch outpost configuration, retrying in 3 seconds","level":"error","logger":"authentik.outpost.ak-api-controller","timestamp":"2026-06-26T11:14:31Z"}
fuzefront/authentik-server-75599696fb-rxhw6: {"error":"Get \"http://0.0.0.0:9000/api/v3/outposts/instances/\": net/http: invalid header field value for \"Authorization\"","event":"Failed to fetch outpost configuration, retrying in 3 seconds","level":"error","logger":"authentik.outpost.ak-api-controller","timestamp":"2026-06-26T11:14:28Z"}
fuzefront/authentik-server-75599696fb-rxhw6: {"error":"Get \"http://0.0.0.0:9000/api/v3/outposts/instances/\": net/http: invalid header field value for \"Authorization\"","event":"Failed to fetch outpost configuration, retrying in 3 seconds","level":"error","logger":"authentik.outpost.ak-api-controller","timestamp":"2026-06-26T11:14:25Z"}
fuzefront/authentik-server-75599696fb-rxhw6: {"error":"Get \"http://0.0.0.0:9000/api/v3/outposts/instances/\": net/http: invalid header field value for \"Authorization\"","event":"Failed to fetch outpost configuration, retrying in 3 seconds","level":"error","logger":"authentik.outpost.ak-api-controller","timestamp":"2026-06-26T11:14:22Z"}
fuzefront/authentik-server-75599696fb-rxhw6: {"error":"Get \"http://0.0.0.0:9000/api/v3/outposts/instances/\": net/http: invalid header field value for \"Authorization\"","event":"Failed to fetch outpost configuration, retrying in 3 seconds","level":"error","logger":"authentik.outpost.ak-api-controller","timestamp":"2026-06-26T11:14:19Z"}
fuzefront/authentik-server-75599696fb-rxhw6: {"error":"Get \"http://0.0.0.0:9000/api/v3/outposts/instances/\": net/http: invalid header field value for \"Authorization\"","event":"Failed to fetch outpost configuration, retrying in 3 seconds","level":"error","logger":"authentik.outpost.ak-api-controller","timestamp":"2026-06-26T11:14:16Z"}
fuzefront/authentik-server-75599696fb-rxhw6: {"error":"Get \"http://0.0.0.0:9000/api/v3/outposts/instances/\": net/http: invalid header field value for \"Authorization\"","event":"Failed to fetch outpost configuration, retrying in 3 seconds","level":"error","logger":"authentik.outpost.ak-api-controller","timestamp":"2026-06-26T11:14:13Z"}
fuzefront/authentik-server-75599696fb-rxhw6: {"error":"Get \"http://0.0.0.0:9000/api/v3/outposts/instances/\": net/http: invalid header field value for \"Authorization\"","event":"Failed to fetch outpost configuration, retrying in 3 seconds","level":"error","logger":"authentik.outpost.ak-api-controller","timestamp":"2026-06-26T11:14:10Z"}
fuzefront/authentik-server-75599696fb-rxhw6: {"error":"Get \"http://0.0.0.0:9000/api/v3/outposts/instances/\": net/http: invalid header field value for \"Authorization\"","event":"Failed to fetch outpost configuration, retrying in 3 seconds","level":"error","logger":"authentik.outpost.ak-api-controller","timestamp":"2026-06-26T11:14:07Z"}
fuzefront/authentik-server-75599696fb-rxhw6: {"error":"Get \"http://0.0.0.0:9000/api/v3/outposts/instances/\": net/http: invalid header field value for \"Authorization\"","event":"Failed to fetch outpost configuration, retrying in 3 seconds","level":"error","logger":"authentik.outpost.ak-api-controller","timestamp":"2026-06-26T11:14:04Z"}
fuzefront/authentik-server-75599696fb-rxhw6: {"error":"Get \"http://0.0.0.0:9000/api/v3/outposts/instances/\": net/http: invalid header field value for \"Authorization\"","event":"Failed to fetch outpost configuration, retrying in 3 seconds","level":"error","logger":"authentik.outpost.ak-api-controller","timestamp":"2026-06-26T11:14:01Z"}
fuzefront/authentik-server-75599696fb-rxhw6: {"error":"Get \"http://0.0.0.0:9000/api/v3/outposts/instances/\": net/http: invalid header field value for \"Authorization\"","event":"Failed to fetch outpost configuration, retrying in 3 seconds","level":"error","logger":"authentik.outpost.ak-api-controller","timestamp":"2026-06-26T11:13:58Z"}
fuzefront/authentik-server-75599696fb-rxhw6: {"error":"Get \"http://0.0.0.0:9000/api/v3/outposts/instances/\": net/http: invalid header field value for \"Authorization\"","event":"Failed to fetch outpost configuration, retrying in 3 seconds","level":"error","logger":"authentik.outpost.ak-api-controller","timestamp":"2026-06-26T11:13:55Z"}
fuzefront/authentik-server-75599696fb-rxhw6: {"error":"Get \"http://0.0.0.0:9000/api/v3/outposts/instances/\": net/http: invalid header field value for \"Authorization\"","event":"Failed to fetch outpost configuration, retrying in 3 seconds","level":"error","logger":"authentik.outpost.ak-api-controller","timestamp":"2026-06-26T11:13:52Z"}
fuzefront/authentik-server-75599696fb-rxhw6: {"error":"Get \"http://0.0.0.0:9000/api/v3/outposts/instances/\": net/http: invalid header field value for \"Authorization\"","event":"Failed to fetch outpost configuration, retrying in 3 seconds","level":"error","logger":"authentik.outpost.ak-api-controller","timestamp":"2026-06-26T11:13:49Z"}
fuzefront/authentik-server-75599696fb-rxhw6: {"error":"Get \"http://0.0.0.0:9000/api/v3/outposts/instances/\": net/http: invalid header field value for \"Authorization\"","event":"Failed to fetch outpost configuration, retrying in 3 seconds","level":"error","logger":"authentik.outpost.ak-api-controller","timestamp":"2026-06-26T11:13:46Z"}
fuzefront/authentik-server-75599696fb-rxhw6: {"error":"Get \"http://0.0.0.0:9000/api/v3/outposts/instances/\": net/http: invalid header field value for \"Authorization\"","event":"Failed to fetch outpost configuration, retrying in 3 seconds","level":"error","logger":"authentik.outpost.ak-api-controller","timestamp":"2026-06-26T11:13:43Z"}
fuzefront/authentik-server-75599696fb-rxhw6: {"error":"Get \"http://0.0.0.0:9000/api/v3/outposts/instances/\": net/http: invalid header field value for \"Authorization\"","event":"Failed to fetch outpost configuration, retrying in 3 seconds","level":"error","logger":"authentik.outpost.ak-api-controller","timestamp":"2026-06-26T11:13:40Z"}
fuzefront/authentik-server-75599696fb-rxhw6: {"error":"Get \"http://0.0.0.0:9000/api/v3/outposts/instances/\": net/http: invalid header field value for \"Authorization\"","event":"Failed to fetch outpost configuration, retrying in 3 seconds","level":"error","logger":"authentik.outpost.ak-api-controller","timestamp":"2026-06-26T11:13:37Z"}
fuzefront/authentik-server-75599696fb-rxhw6: {"error":"Get \"http://0.0.0.0:9000/api/v3/outposts/instances/\": net/http: invalid header field value for \"Authorization\"","event":"Failed to fetch outpost configuration, retrying in 3 seconds","level":"error","logger":"authentik.outpost.ak-api-controller","timestamp":"2026-06-26T11:13:34Z"}
fuzefront/authentik-server-75599696fb-rxhw6: {"error":"Get \"http://0.0.0.0:9000/api/v3/outposts/instances/\": net/http: invalid header field value for \"Authorization\"","event":"Failed to fetch outpost configuration, retrying in 3 seconds","level":"error","logger":"authentik.outpost.ak-api-controller","timestamp":"2026-06-26T11:13:31Z"}
fuzeinfra/fuzeinfra-loki-0: level=info ts=2026-06-26T11:15:00.219656819Z caller=metrics.go:223 component=frontend org_id=fake traceID=5cb0c4a512357c34 latency=fast query="sum(count_over_time({namespace=~\".+\"} |~ \"(?i)(ERROR|CRIT|CRITICAL|FATAL|PANIC)\" [5m]))" query_hash=4236455189 query_type=metric range_type=range length=5m0s start_delta=5m0.219634357s end_delta=219.634557ms step=2s duration=94.555333ms status=200 limit=100 returned_lines=0 throughput=14MB total_bytes=1.3MB total_bytes_structured_metadata=62kB lines_per_second=93289 total_lines=8821 post_filter_lines=250 total_entries=1 store_chunks_download_time=958.132µs queue_time=4.914336ms splits=0 shards=1 query_referenced_structured_metadata=false pipeline_wrapper_filtered_lines=0 chunk_refs_fetch_time=1.044992ms cache_chunk_req=0 cache_chunk_hit=0 cache_chunk_bytes_stored=0 cache_chunk_bytes_fetched=0 cache_chunk_download_time=0s cache_index_req=0 cache_index_hit=0 cache_index_download_time=0s cache_stats_results_req=0 cache_stats_results_hit=0 cache_stats_results_download_time=0s cache_volume_results_req=0 cache_volume_results_hit=0 cache_volume_results_download_time=0s cache_result_req=0 cache_result_hit=0 cache_result_download_time=0s cache_result_query_length_served=0s ingester_chunk_refs=1 ingester_chunk_downloaded=1 ingester_chunk_matches=25 ingester_requests=1 ingester_chunk_head_bytes=702kB ingester_chunk_compressed_bytes=37kB ingester_chunk_decompressed_bytes=595kB ingester_post_filter_lines=250 congestion_control_latency=0s index_total_chunks=0 index_post_bloom_filter_chunks=0 index_bloom_filter_ratio=0.00 index_shard_resolver_duration=0s disable_pipeline_wrappers=false
fuzeinfra/fuzeinfra-loki-0: level=info ts=2026-06-26T11:15:00.21566617Z caller=metrics.go:223 component=querier org_id=fake traceID=5cb0c4a512357c34 latency=fast query="sum(count_over_time({namespace=~\".+\"} |~ \"(?i)(ERROR|CRIT|CRITICAL|FATAL|PANIC)\"[5m]))" query_hash=561216387 query_type=metric range_type=range length=5m0s start_delta=5m0.215539215s end_delta=215.539385ms step=2s duration=41.073639ms status=500 limit=100 returned_lines=0 throughput=32MB total_bytes=1.3MB total_bytes_structured_metadata=62kB lines_per_second=214760 total_lines=8821 post_filter_lines=250 total_entries=151 store_chunks_download_time=958.132µs queue_time=4.914336ms splits=0 shards=0 query_referenced_structured_metadata=false pipeline_wrapper_filtered_lines=0 chunk_refs_fetch_time=1.044992ms cache_chunk_req=0 cache_chunk_hit=0 cache_chunk_bytes_stored=0 cache_chunk_bytes_fetched=0 cache_chunk_download_time=0s cache_index_req=0 cache_index_hit=0 cache_index_download_time=0s cache_stats_results_req=0 cache_stats_results_hit=0 cache_stats_results_download_time=0s cache_volume_results_req=0 cache_volume_results_hit=0 cache_volume_results_download_time=0s cache_result_req=0 cache_result_hit=0 cache_result_download_time=0s cache_result_query_length_served=0s ingester_chunk_refs=1 ingester_chunk_downloaded=1 ingester_chunk_matches=25 ingester_requests=1 ingester_chunk_head_bytes=702kB ingester_chunk_compressed_bytes=37kB ingester_chunk_decompressed_bytes=595kB ingester_post_filter_lines=250 congestion_control_latency=0s index_total_chunks=0 index_post_bloom_filter_chunks=0 index_bloom_filter_ratio=0.00 index_shard_resolver_duration=0s disable_pipeline_wrappers=false
fuzeinfra/fuzeinfra-loki-0: level=info ts=2026-06-26T11:15:00.174172965Z caller=engine.go:247 component=querier org_id=fake traceID=5cb0c4a512357c34 msg="executing query" type=range query="sum(count_over_time({namespace=~\".+\"} |~ \"(?i)(ERROR|CRIT|CRITICAL|FATAL|PANIC)\"[5m]))" length=5m0s step=2s query_hash=561216387
fuzeinfra/fuzeinfra-loki-0: level=info ts=2026-06-26T11:15:00.112292671Z caller=roundtrip.go:364 org_id=fake traceID=5cb0c4a512357c34 msg="executing query" type=range query="sum(count_over_time({namespace=~\".+\"} |~ \"(?i)(ERROR|CRIT|CRITICAL|FATAL|PANIC)\" [5m]))" start=2026-06-26T11:10:00Z end=2026-06-26T11:15:00Z start_delta=5m0.112284946s end_delta=112.285948ms length=5m0s step=2000 query_hash=4236455189
fuzeinfra/fuzeinfra-grafana-0: logger=ngalert.sender.router rule_uid=critlogdetect org_id=1 t=2026-06-26T11:15:00.275738637Z level=info msg="Sending alerts to local notifier" count=1
fuzeinfra/fuzeinfra-grafana-0: logger=tsdb.loki endpoint=queryData pluginId=loki dsName=Loki dsUID=fuzeinfra-loki uname=grafana_scheduler rule_uid=critlogdetect org_id=1 fromAlert=true t=2026-06-26T11:15:00.238979755Z level=info msg="Response parsed from loki" duration=795.401µs framesLength=1 stage=parseResponse
fuzeinfra/fuzeinfra-grafana-0: logger=tsdb.loki endpoint=queryData pluginId=loki dsName=Loki dsUID=fuzeinfra-loki uname=grafana_scheduler rule_uid=critlogdetect org_id=1 fromAlert=true t=2026-06-26T11:15:00.237867643Z level=info msg="Response received from loki" duration=209.874492ms stage=databaseRequest statusCode=200 contentLength= start=2026-06-26T11:10:00Z end=2026-06-26T11:15:00Z step=2s query="sum(count_over_time({namespace=~\".+\"} |~ \"(?i)(ERROR|CRIT|CRITICAL|FATAL|PANIC)\" [5m]))" queryType=range direction=backward maxLines=0 supportingQueryType=none lokiHost=fuzeinfra-loki:3100 lokiPath=/loki/api/v1/query_range status=ok
fuzeinfra/fuzeinfra-grafana-0: logger=plugins.update.checker t=2026-06-26T11:14:39.938900425Z level=info msg="flag evaluation succeeded" flag="{Value:false EvaluationDetails:{FlagKey:pluginsAutoUpdate FlagType:bool ResolutionDetail:{Variant:default Reason:STATIC ErrorCode: ErrorMessage: FlagMetadata:map[]}}}" details="{Value:false EvaluationDetails:{FlagKey:pluginsAutoUpdate FlagType:bool ResolutionDetail:{Variant:default Reason:STATIC ErrorCode: ErrorMessage: FlagMetadata:map[]}}}"
argocd/argocd-server-79c794477b-4mxw9: {"error":"failed to list *v1alpha1.ApplicationSet: the server could not find the requested resource (get applicationsets.argoproj.io)","level":"error","logger":"UnhandledError","msg":"Failed to watch","reflector":"pkg/mod/k8s.io/client-go@v0.34.0/tools/cache/reflector.go:290","time":"2026-06-26T11:14:40Z","type":"*v1alpha1.ApplicationSet"}
argocd/argocd-server-79c794477b-4mxw9: {"error":"failed to list *v1alpha1.ApplicationSet: the server could not find the requested resource (get applicationsets.argoproj.io)","level":"error","logger":"UnhandledError","msg":"Failed to watch","reflector":"pkg/mod/k8s.io/client-go@v0.34.0/tools/cache/reflector.go:290","time":"2026-06-26T11:14:07Z","type":"*v1alpha1.ApplicationSet"}
argocd/argocd-server-79c794477b-4mxw9: {"error":"failed to list *v1alpha1.ApplicationSet: the server could not find the requested resource (get applicationsets.argoproj.io)","level":"error","logger":"UnhandledError","msg":"Failed to watch","reflector":"pkg/mod/k8s.io/client-go@v0.34.0/tools/cache/reflector.go:290","time":"2026-06-26T11:13:35Z","type":"*v1alpha1.ApplicationSet"}

Auto-opened by grafana-crit-fix at 2026-06-26T11:15:03.981Z

[izzywdev]

🤝 Handed off to FuzeFront.

This CRIT originated from the fuzefront/authentik-server namespace — a FuzeFront-owned service, not FuzeInfra. The root cause (a malformed authentik outpost API token) must be fixed in FuzeFront, so I've opened it there for FuzeFront's own @claude process to handle:

➡️ izzywdev/FuzeFront#104

Closing this FuzeInfra issue as handed off — tracking continues in the FuzeFront issue above (triggered → fix PR → deploy). This is the per-repo routing the crit-alert pipeline now does automatically (#106); #103 predated it, so this handoff is manual.