unkinben 6928e71f31 Wire ArgoCD RBAC to Authentik ak_groups / akP-argocd-admin ...

Consume the two-tier Authentik RBAC (terraform-authentik): request the
hierarchical `ak_groups` scope/claim and map the `akP-argocd-admin` permission
group to role:admin (replacing the flat `argocd-admins`). Members of
akR-global-admin inherit akP-argocd-admin, so they get ArgoCD admin.

- argocd-cm: add `ak_groups` to requestedScopes + requestedIDTokenClaims
- argocd-rbac-cm: scopes [ak_groups]; policy.csv g, akP-argocd-admin, role:admin

2026-07-18 16:20:56 +10:00

.claude/commands

chore: bump almalinux9 image tags (#188)

2026-06-07 00:35:12 +10:00

.woodpecker

chore: bump almalinux9 image tags (#188)

2026-06-07 00:35:12 +10:00

apps

Deploy cephrgw-operator to cephrgw-system (#261)

2026-07-18 14:32:11 +10:00

argocd

Deploy cephrgw-operator to cephrgw-system (#261)

2026-07-18 14:32:11 +10:00

ci

Add JSON schema generation for kubeconform CRD validation (#212)

2026-06-28 17:26:08 +10:00

clusters/au-syd1

Wire ArgoCD RBAC to Authentik ak_groups / akP-argocd-admin

2026-07-18 16:20:56 +10:00

schemas

Bump bind-operator to v0.2.0 and deploy companion TSIG API (#249)

2026-07-12 19:12:39 +10:00

.gitignore

feat: add reloader (#6)

2026-03-01 16:34:01 +11:00

.pre-commit-config.yaml

Add JSON schema generation for kubeconform CRD validation (#212)

2026-06-28 17:26:08 +10:00

.yamllint.yaml

feat: add pre-commit configuration (#9)

2026-03-02 00:09:21 +11:00

AGENTS.md

chore: bump almalinux9 image tags (#188)

2026-06-07 00:35:12 +10:00

Makefile

Add JSON schema generation for kubeconform CRD validation (#212)

2026-06-28 17:26:08 +10:00

migration.md

chore: bump almalinux9 image tags (#188)

2026-06-07 00:35:12 +10:00

S

Description

GitOps for ArgoCD

4.7 MiB

Languages

Shell 88.8%

Makefile 11.2%