unkin/terraform-authentik
4
0
Fork 0
Code Issues 1 Pull Requests Actions Packages Projects Releases Wiki Activity
75 Commits 1 Branch 0 Tags
77adee64aa19daa4ef17e95ac4f4dc5bf21cf969
Commit Graph

2 Commits

Author SHA1 Message Date
unkin-agent 643c484dea watchstate: add external watchstate.unkin.net redirect URI
ci/woodpecker/pr/pre-commit Pipeline was successful
Details
ci/woodpecker/pr/plan Pipeline was successful
Details 
watchstate is being exposed externally at watchstate.unkin.net; oauth2-proxy needs the external callback registered.
 2026-08-25 21:42:26 +10:00
unkin-agent db5bf753b5 Onboard watchstate into Authentik for oauth2-proxy
ci/woodpecker/pr/plan Pipeline failed
Details
ci/woodpecker/pr/pre-commit Pipeline was successful
Details 
watchstate is an internal media watch-state sync admin tool deployed at
watchstate.k8s.syd1.au.unkin.net behind oauth2-proxy (OIDC against
Authentik). Add the OAuth2/OIDC provider + application mirroring the
logviewer/traefik in-cluster admin pattern, gate it with the
akP-watchstate-admin permission group bound to the app, and nest that
permission into the akR-global-admin role so only the admin team can
authorize.
 2026-08-25 20:11:38 +10:00