unkin/argocd-apps
3
0
Fork 0
Code Issues 7 Pull Requests 2 Actions Packages Projects Releases Wiki Activity

Wire Grafana OAuth roles to Authentik ak_groups / akP-grafana-admin #264

Merged
benvin merged 1 commits from benvin/grafana-akgroups into main 2026-07-18 16:24:27 +10:00
Conversation 0 Commits 1 Files Changed 1
+6 -3

1 Commits

Author SHA1 Message Date
unkinben 1d4bf9de87 Wire Grafana OAuth roles to Authentik ak_groups / akP-grafana-admin
ci/woodpecker/pr/pre-commit Pipeline was successful
Details
ci/woodpecker/pr/kubeconform Pipeline was successful
Details 
Consume the two-tier Authentik RBAC (terraform-authentik): request the
hierarchical `ak_groups` scope and map `akP-grafana-admin` to the Grafana Admin
role (replacing the flat `grafana-admins`). Members of akR-global-admin inherit
akP-grafana-admin. Everyone else who can log in (gated to akP-grafana-* by the
Authentik access policy) gets Viewer.
 2026-07-18 16:21:50 +10:00