unkin/terraform-authentik
4
0
Fork 0
Code Issues 1 Pull Requests Actions Packages Projects Releases Wiki Activity

Commit Graph

  • 93c634e4c4 Merge pull request 'Onboard repospawner UI to Authentik OIDC' (#32) from benvin/repospawner-oidc into main main benvin 2026-08-31 22:21:09 +10:00
  • 3977f6f86b Merge remote-tracking branch 'origin/main' into benvin/repospawner-oidc unkin-agent 2026-08-31 22:07:36 +10:00
  • 6d014ce913 Merge pull request 'Onboard OpenBao as an Authentik OIDC client' (#33) from benvin/vault-oidc-provider into main benvin 2026-08-30 22:17:39 +10:00
  • 230db5ad7e Onboard OpenBao as an Authentik OIDC client unkin-agent 2026-08-30 21:25:39 +10:00
  • 2f80c4a536 Onboard repospawner UI to Authentik OIDC unkin-agent 2026-08-30 15:09:47 +10:00
  • 5ecd03cdd5 Merge pull request 'Namespace service account token map keys by account' (#31) from benvin/token-foreach-namespacing into main benvin 2026-08-30 00:03:11 +10:00
  • 0c6a9104c0 Namespace service account token map keys by account unkin-agent 2026-08-29 23:10:38 +10:00
  • 3884a5b21f Merge pull request 'Manage the agent API service account and token in Terraform' (#30) from benvin/agent-api-token-iac into main benvin 2026-08-29 23:04:04 +10:00
  • 8ec8bbda8e Manage the agent API service account and token in Terraform unkin-agent 2026-08-29 22:58:40 +10:00
  • 09f7c9042e Merge pull request 'Onboard mediamark to Authentik OIDC' (#29) from benvin/mediamark-oidc into main benvin 2026-08-29 21:55:34 +10:00
  • 1485962cf5 Fix mediamark Vault secret path and permission group name unkin-agent 2026-08-29 21:13:41 +10:00
  • 72e65d7810 Onboard mediamark to Authentik OIDC unkin-agent 2026-08-29 20:57:54 +10:00
  • e397fd909f Merge pull request 'Jellyfin SSO: cheeztv OIDC hosts, media-group gating, LDAP outpost' (#28) from benvin/jellyfin-sso into main benvin 2026-08-29 11:51:19 +10:00
  • 9760c2eb3f Fix KV path comment in jellyfin-ldap provider configuration. unkin-agent 2026-08-26 22:23:32 +10:00
  • 3396b399ce Jellyfin SSO: cheeztv OIDC hosts, media-group gating, LDAP outpost unkin-agent 2026-08-26 22:15:28 +10:00
  • 77adee64aa Merge pull request 'watchstate: add external watchstate.unkin.net redirect URI' (#27) from benvin/watchstate-external-uri into main benvin 2026-08-25 21:47:39 +10:00
  • 643c484dea watchstate: add external watchstate.unkin.net redirect URI unkin-agent 2026-08-25 21:42:26 +10:00
  • 31b92b2b93 Merge pull request 'Onboard watchstate into Authentik (oauth2-proxy, admin-team-gated)' (#26) from benvin/watchstate-oidc into main benvin 2026-08-25 20:48:01 +10:00
  • 00f835ac8c Retrigger plan: oauth-credentials kv secret now seeded unkin-agent 2026-08-25 20:15:49 +10:00
  • db5bf753b5 Onboard watchstate into Authentik for oauth2-proxy unkin-agent 2026-08-25 20:11:38 +10:00
  • 06e71604cf Merge pull request 'Add adult/kids media groups for media split' (#25) from benvin/media-groups into main benvin 2026-08-24 22:03:32 +10:00
  • ec0646657d Add adult/kids media groups for media split unkin-agent 2026-08-24 22:01:25 +10:00
  • ef84176633 Merge pull request 'Point identity env provider at in-cluster authentik-server ClusterIP' (#24) from benvin/incluster-provider-url into main benvin 2026-08-23 23:22:56 +10:00
  • ae679ab587 ci: move authentik_url ClusterIP override into woodpecker only unkin-agent 2026-08-23 23:20:32 +10:00
  • 218a640882 Point identity env provider at in-cluster authentik-server ClusterIP unkin-agent 2026-08-23 23:07:04 +10:00
  • 62fb15791a Merge pull request 'Add logviewer OAuth2 provider/application and akP-logviewer-admin permission' (#21) from benvin/logviewer-oidc into main benvin 2026-08-23 23:02:38 +10:00
  • 73378cef30 Merge pull request 'Run plan without acquiring the Consul state lock' (#22) from benvin/lockfree-plan into main benvin 2026-08-23 22:55:52 +10:00
  • c047ba3819 Merge pull request 'ci: fetch vault from artifactapi instead of dnf install' (#23) from benvin/vault-via-artifactapi into main benvin 2026-08-23 22:54:08 +10:00
  • 0480303db6 Merge origin/main (traefik #20) into benvin/logviewer-oidc unkin-agent 2026-08-23 22:48:36 +10:00
  • 5079d95ada Merge pull request 'Add traefik OAuth2 provider/application and akP-traefik-admin' (#20) from benvin/traefik-oidc into main benvin 2026-08-23 22:46:35 +10:00
  • 937efb0360 Merge origin/main (jellyfin #19) into benvin/logviewer-oidc unkin-agent 2026-08-23 22:41:11 +10:00
  • ef4d29d1ad ci: fetch vault from artifactapi instead of dnf install unkin-agent 2026-08-23 22:37:12 +10:00
  • aa1f8955c8 Run plan without acquiring the Consul state lock unkin-agent 2026-08-23 22:21:08 +10:00
  • 5f8dfc8450 ci: trigger pipeline on PR head unkin-agent 2026-08-23 22:17:54 +10:00
  • b4e3ef3149 ci: re-run plan after merge of main unkin-agent 2026-08-23 22:16:16 +10:00
  • c1eea2d441 Merge remote-tracking branch 'origin/main' into benvin/traefik-oidc unkin-agent 2026-08-23 22:14:06 +10:00
  • 5c136dfb96 Merge pull request 'Add Jellyfin OIDC provider, application and RBAC groups' (#19) from benvin/jellyfin-oidc into main benvin 2026-08-23 22:10:35 +10:00
  • 43d325146c Add logviewer OAuth2 provider/application and akP-logviewer-admin permission unkin-agent 2026-08-23 17:24:18 +10:00
  • 1872b82550 Add traefik OAuth2 provider/application and akP-traefik-admin permission unkin-agent 2026-08-23 12:35:17 +10:00
  • bbbb61777c Add Jellyfin OIDC provider, application and RBAC groups unkin-agent 2026-08-23 12:33:55 +10:00
  • 5f4b3557c1 Merge pull request 'add arrstack oauth app + per-app access groups' (#18) from benvin/arrstack-oauth into main benvin 2026-08-16 16:11:18 +10:00
  • 547cad6542 ci: re-run plan after oauth-credentials seed unkin-agent 2026-08-16 15:41:33 +10:00
  • e7c1f561f1 add arrstack oauth app + per-app access groups unkin-agent 2026-08-16 15:00:05 +10:00
  • 132da3cfc8 Merge pull request 'Set explicit launch URL for the LiteLLM application' (#16) from benvin/litellm-app-visibility into main benvin 2026-07-31 22:00:02 +10:00
  • 819996b0c7 Merge pull request 'Default OAuth2 providers to RS256 ID token signing' (#15) from benvin/oidc-rs256-signing into main benvin 2026-07-31 21:19:46 +10:00
  • a93205bc82 Set explicit launch URL for the LiteLLM application unkinben 2026-07-31 20:46:35 +10:00
  • b6e9b6b6b9 Default OAuth2 providers to RS256 ID token signing unkinben 2026-07-31 20:28:07 +10:00
  • d85d7afc97 Merge pull request 'Update Gitea OIDC redirect URIs to canonical + admin route' (#14) from benvin/gitea-oidc-hosts into main benvin 2026-07-31 20:09:16 +10:00
  • 1922014ab9 Update Gitea OIDC redirect URIs to canonical + admin route unkinben 2026-07-31 00:02:48 +10:00
  • ecfdf69d52 Merge pull request 'Add Gitea OAuth2/OIDC provider' (#13) from benvin/gitea-oidc into main benvin 2026-07-30 21:09:05 +10:00
  • 0ba2785eb5 Add Gitea OAuth2/OIDC provider + application unkinben 2026-07-29 22:01:58 +10:00
  • a5a2f467a4 Merge pull request 'Set OAuth2 grant_types so authorization_code login works' (#12) from benvin/oauth2-grant-types into main benvin 2026-07-28 22:38:57 +10:00
  • 2b39450ae2 Set OAuth2 grant_types so authorization_code login works unkinben 2026-07-28 22:09:06 +10:00
  • 21ef853a7c Merge pull request 'Add NetBox OAuth2/OIDC provider + application' (#11) from benvin/netbox-oidc into main benvin 2026-07-28 18:06:26 +10:00
  • e8d0457f00 ci: re-run after authentik api recovery unkinben 2026-07-28 17:48:03 +10:00
  • 7d0b8416a7 Re-trigger CI after seeding netbox oauth-credentials in Vault unkinben 2026-07-28 16:49:42 +10:00
  • 8fa4192cc6 Add NetBox OAuth2/OIDC provider + application unkinben 2026-07-28 16:44:52 +10:00
  • 90e0ff1f6a Merge pull request 'Add Ceph dashboard SAML provider' (#9) from benvin/ceph-saml into main benvin 2026-07-24 22:41:52 +10:00
  • bd2ead5855 Merge branch 'main' into benvin/ceph-saml benvin 2026-07-24 22:16:29 +10:00
  • 70c1d4f6ba Merge pull request 'Add LiteLLM RBAC: akP-litellm groups + role claim mapping' (#10) from benvin/litellm-rbac into main benvin 2026-07-19 22:00:59 +10:00
  • 7610627168 Add LiteLLM RBAC: akP-litellm groups + role claim mapping unkinben 2026-07-19 18:42:36 +10:00
  • a7ef454fba Merge pull request 'Add LiteLLM OAuth2/OIDC provider' (#8) from benvin/litellm-oidc into main benvin 2026-07-19 18:27:12 +10:00
  • 9c5937776e Add Ceph dashboard SAML provider unkinben 2026-07-19 02:22:23 +10:00
  • 9098c7dcfc Add LiteLLM OAuth2/OIDC provider unkinben 2026-07-19 02:19:19 +10:00
  • 14ad52b835 Merge pull request 'Add two-tier RBAC: permission/role groups, access policies, hierarchical group claim' (#7) from benvin/rbac-groups into main benvin 2026-07-19 02:13:28 +10:00
  • 805ea48a36 Derive group name from filename; use distinct ak_groups claim unkinben 2026-07-18 16:19:26 +10:00
  • 1dab2ecc6f Add two-tier RBAC: permission/role groups, access policies, group claim unkinben 2026-07-18 16:11:03 +10:00
  • 55ba291531 Merge pull request 'Add Rancher OAuth2/OIDC provider' (#6) from benvin/rancher-oidc into main benvin 2026-07-16 22:23:34 +10:00
  • 58e17d5ae8 Add Rancher OAuth2/OIDC provider unkinben 2026-07-15 20:59:38 +10:00
  • 4dadd1f4ab Merge pull request 'Add ArgoCD OAuth2/OIDC provider' (#3) from benvin/argocd-oidc into main benvin 2026-07-12 23:04:47 +10:00
  • a6dca8eb96 Merge branch 'main' into benvin/argocd-oidc benvin 2026-07-12 23:02:21 +10:00
  • 3af322dff3 Merge pull request 'Fix perpetual redirect_uri drift on oauth2 providers' (#5) from benvin/fix-redirect-uri-type into main benvin 2026-07-12 23:02:09 +10:00
  • c62fdb574a Add argocd-admins group unkinben 2026-07-12 22:36:03 +10:00
  • 1fc0b70e1a Add ArgoCD OAuth2/OIDC provider unkinben 2026-07-12 22:31:27 +10:00
  • 5faa2f84f6 Fix perpetual redirect_uri drift on oauth2 providers unkinben 2026-07-12 22:57:57 +10:00
  • 58b200c512 Merge pull request 'Fix self-referential authentik_group parents' (#4) from benvin/fix-group-parents into main benvin 2026-07-12 22:55:47 +10:00
  • 7636d45f21 Fix self-referential authentik_group parents unkinben 2026-07-12 22:41:56 +10:00
  • 9e75f39a06 Merge pull request 'Initial scaffold' (#1) from benvin/initial-scaffold into main benvin 2026-07-06 23:52:04 +10:00
  • 11a25fdca0 Merge pull request 'authentik: add Grafana OAuth2/OIDC provider' (#2) from benvin/grafana-oidc into benvin/initial-scaffold benvin 2026-07-06 23:50:13 +10:00
  • 0b1b67fbd5 ci: re-run after vault #82 applied (token + oauth read policy live) unkinben 2026-07-06 23:44:04 +10:00
  • 93742883a5 fix: skip_child_token on vault provider unkinben 2026-07-06 23:43:16 +10:00
  • d96d36a079 makefile: source TF_VAR_authentik_token from vault (kv/service/terraform/authentik) unkinben 2026-07-06 23:32:21 +10:00
  • 41cc0fce8b ci: re-run plan on fixed head (duplicate required_providers resolved) unkinben 2026-07-06 23:17:37 +10:00
  • d1aef45d1d fix: drop duplicate required_providers from generated backend.tf unkinben 2026-07-06 23:12:43 +10:00
  • 3d7131032f ci: re-run plan after terraform-vault kv policy applied unkinben 2026-07-06 23:08:03 +10:00
  • 97be93a9ff authentik: add Grafana OAuth2/OIDC provider + application unkinben 2026-07-06 22:06:48 +10:00
  • 00a122135e Use identity.k8s.syd1.au.unkin.net as provider endpoint unkinben 2026-06-28 12:11:47 +10:00
  • 8aa2273dcf Fix provider schema for goauthentik/authentik 2026.5.0 unkinben 2026-06-28 12:04:19 +10:00
  • 4042760a16 Initial scaffold unkinben 2026-06-28 11:55:26 +10:00
  • 2d87c83ab9 Initial commit gitadmin 2026-06-28 01:00:14 +10:00