unkin/argocd-apps
3
0
Fork 0
Code Issues 7 Pull Requests 3 Actions Packages Projects Releases Wiki Activity

Wire ArgoCD RBAC to Authentik ak_groups / akP-argocd-admin #263

Merged
benvin merged 1 commits from benvin/argocd-akgroups into main 2026-07-18 16:23:59 +10:00
Conversation 0 Commits 1 Files Changed 2
+10 -5

1 Commits

Author SHA1 Message Date
unkinben 6928e71f31 Wire ArgoCD RBAC to Authentik ak_groups / akP-argocd-admin
ci/woodpecker/pr/pre-commit Pipeline was successful
Details
ci/woodpecker/pr/kubeconform Pipeline was successful
Details 
Consume the two-tier Authentik RBAC (terraform-authentik): request the
hierarchical `ak_groups` scope/claim and map the `akP-argocd-admin` permission
group to role:admin (replacing the flat `argocd-admins`). Members of
akR-global-admin inherit akP-argocd-admin, so they get ArgoCD admin.

- argocd-cm: add `ak_groups` to requestedScopes + requestedIDTokenClaims
- argocd-rbac-cm: scopes [ak_groups]; policy.csv g, akP-argocd-admin, role:admin
 2026-07-18 16:20:56 +10:00