unkinben 1d4bf9de87 Wire Grafana OAuth roles to Authentik ak_groups / akP-grafana-admin ...

Consume the two-tier Authentik RBAC (terraform-authentik): request the
hierarchical `ak_groups` scope and map `akP-grafana-admin` to the Grafana Admin
role (replacing the flat `grafana-admins`). Members of akR-global-admin inherit
akP-grafana-admin. Everyone else who can log in (gated to akP-grafana-* by the
Authentik access policy) gets Viewer.

2026-07-18 16:21:50 +10:00

..

age-api

Add age-api deployment (#210)

2026-06-28 12:19:38 +10:00

artifactapi

cnpg: reduce cluster CPU requests to 50m (#247)

2026-07-12 18:39:13 +10:00

authentik

cnpg: reduce cluster CPU requests to 50m (#247)

2026-07-12 18:39:13 +10:00

bind-internal

bind-internal: add ceph.unkin.net authoritative zone (#260)

2026-07-17 22:43:27 +10:00

bind-system

Bump bind-operator to v0.2.3 (deterministic render) (#255)

2026-07-12 23:22:04 +10:00

cattle-system

fix(gateways): add explicit group/kind/weight to all HTTPRoute refs (#162)

2026-05-24 20:32:37 +10:00

cephrgw-system

Deploy cephrgw-operator to cephrgw-system (#261)

2026-07-18 14:32:11 +10:00

cert-manager

cert-manager: scrape metrics (follow-up to #239) (#241)

2026-07-07 00:08:06 +10:00

certificates

feat: migrate certificates from Terraform to ArgoCD (#37)

2026-03-19 00:16:33 +11:00

cnpg-system

feat: migrate cnpg-system from Terraform to ArgoCD (#44)

2026-03-19 01:25:50 +11:00

consul

fix(gateways): add explicit group/kind/weight to all HTTPRoute refs (#162)

2026-05-24 20:32:37 +10:00

csi-cephfs

observability: scrape existing app metrics (audit + ceph-csi batch) (#239)

2026-07-06 23:57:54 +10:00

csi-cephrbd

observability: scrape existing app metrics (audit + ceph-csi batch) (#239)

2026-07-06 23:57:54 +10:00

elastic-system

feat: migrate elastic-system to ArgoCD (#79)

2026-03-27 17:00:05 +11:00

encapi

cnpg: reduce cluster CPU requests to 50m (#247)

2026-07-12 18:39:13 +10:00

externaldns

feat: migrate externaldns from Terraform to ArgoCD (#43)

2026-03-19 01:22:39 +11:00

grafana

Wire Grafana OAuth roles to Authentik ak_groups / akP-grafana-admin

2026-07-18 16:21:50 +10:00

grafana-system

grafana-system: deploy grafana-operator

2026-07-05 22:16:30 +10:00

inteldeviceplugins-system

chore: migrate reloader/reflector to virtual/helm (#115)

2026-05-05 21:42:23 +10:00

kanidm

feat(kanidm): scale down to single replica, remove replication (#185)

2026-06-02 22:41:28 +10:00

litellm

cnpg: reduce cluster CPU requests to 50m (#247)

2026-07-12 18:39:13 +10:00

node-feature-discovery

feat: migrate node-feature-discovery and inteldeviceplugins-system to platform project (#48)

2026-03-19 02:14:45 +11:00

observability

reduce CPU requests across observability, authentik, bind, woodpecker (#248)

2026-07-12 18:41:08 +10:00

paperclip

cnpg: reduce cluster CPU requests to 50m (#247)

2026-07-12 18:39:13 +10:00

priority-classes

feat(platform): add priority-classes app with low/power/medium/high classes (#174)

2026-05-26 23:41:54 +10:00

puppet

chore: reduce resource requirements of puppet (#246)

2026-07-12 18:04:50 +10:00

purelb

feat: migrate purelb to ArgoCD (#84)

2026-04-07 19:52:17 +10:00

reflector-system

fix: helm-charts in overlay only (#5)

2026-03-01 16:01:32 +11:00

reloader-system

feat: add reloader (#6)

2026-03-01 16:34:01 +11:00

reposync

feat: migrate reposync to ArgoCD (#78)

2026-03-27 16:26:35 +11:00

traefik-system

fix(traefik): add instance labels to GatewayClasses (#137)

2026-05-23 00:23:18 +10:00

vault

feat(vault): switch to Kubernetes service registration (#171)

2026-05-26 00:06:56 +10:00

vm-system

feat: migrate vm-system to ArgoCD (#80)

2026-03-27 17:04:15 +11:00

vso-system

feat: migrate vso-system to ArgoCD (#81)

2026-04-07 19:33:50 +10:00

woodpecker

Add terraform-rancher woodpecker ServiceAccount (#257)

2026-07-16 22:22:13 +10:00

kustomization.yaml

feat: initial commit

2026-03-01 14:31:16 +11:00