unkin/terraform-authentik
4
0
Fork 0
Code Issues 1 Pull Requests Actions Packages Projects Releases Wiki Activity

Commit Graph

  • 19727858ca Merge pull request 'Add stalwart OIDC application and provider' (#45) from benvin/stalwart-oidc into main main benvin 2026-10-12 21:33:38 +11:00
  • dc5a24e564 Make stalwart a public PKCE client with account and admin callbacks unkin-agent 2026-10-12 00:43:53 +11:00
  • bfcc362239 Rename akP-mail-users to akP-mail-user unkin-agent 2026-10-12 00:22:44 +11:00
  • 0f8ec8a960 Read stalwart client secret from the mail default SA path unkin-agent 2026-10-12 00:20:08 +11:00
  • 366cdafd6a Add stalwart OIDC application and provider unkin-agent 2026-10-12 00:18:21 +11:00
  • eb11a1bf06 Merge pull request 'ci: use container-opentofu image' (#44) from benvin/opentofu-image into main benvin 2026-10-05 14:11:20 +11:00
  • c36967e6bf ci: use container-opentofu image unkin-agent 2026-10-05 13:49:37 +11:00
  • 633f3b4934 Merge pull request 'Allow grafana.unkin.net redirect for Grafana' (#43) from benvin/grafana-public-host into main benvin 2026-10-05 00:37:02 +11:00
  • d86a8271dc Restore module lock file unkin-agent 2026-10-05 00:29:41 +11:00
  • da1b61db48 Allow grafana.unkin.net redirect for Grafana unkin-agent 2026-10-05 00:29:33 +11:00
  • a954306e09 Merge pull request 'Extend ArgoCD OIDC token validity to 24h' (#42) from benvin/argocd-token-validity into main benvin 2026-10-02 22:59:47 +10:00
  • 5671213344 Extend ArgoCD OIDC token validity to 24h unkin-agent 2026-10-02 22:48:57 +10:00
  • 0c6145e057 Merge pull request 'Read the vlogs client secret from the vlogs namespace path' (#41) from benvin/vlogs-namespace-move into main benvin 2026-09-28 22:55:50 +10:00
  • 89a5caf353 Read the vlogs client secret from the vlogs namespace path unkin-agent 2026-09-28 22:53:01 +10:00
  • e90e6d027b Merge pull request 'Add vlogs OIDC application and provider' (#40) from benvin/vlogs-oidc into main benvin 2026-09-27 11:20:35 +10:00
  • b3c08369fd Add vlogs OIDC application and provider unkin-agent 2026-09-27 10:13:18 +10:00
  • 9508c151c4 Merge pull request 'Make the ArgoCD OAuth2 client public and register the mobile callback' (#39) from benvin/argocd-public-client into main benvin 2026-09-19 15:40:18 +10:00
  • 405dede578 Make the ArgoCD OAuth2 client public and register the mobile callback unkin-agent 2026-09-19 15:26:18 +10:00
  • 4fceaeeee6 Merge pull request 'Manage human role membership from config/users/' (#37) from benvin/media-adult-membership into main benvin 2026-09-19 14:55:02 +10:00
  • 1e42fdfc2c Merge pull request 'Nest media groups into akR-global-admin' (#36) from benvin/global-admin-media-access into main benvin 2026-09-19 14:53:56 +10:00
  • e2d7de4148 Merge branch 'main' into benvin/media-adult-membership benvin 2026-09-19 13:48:16 +10:00
  • 331330872d Merge branch 'main' into benvin/global-admin-media-access benvin 2026-09-19 13:48:05 +10:00
  • 3f6a046dff Merge pull request 'Pin the authentik provider to 2026.5.1' (#38) from benvin/pin-authentik-provider into main benvin 2026-09-19 12:59:13 +10:00
  • 3662ff15ca Pin the authentik provider to 2026.5.1 unkin-agent 2026-09-19 12:51:26 +10:00
  • d848d9ae86 Manage human role membership from config/users/ unkin-agent 2026-09-19 12:46:58 +10:00
  • fedbb2fa42 Nest media groups into akR-global-admin unkin-agent 2026-09-19 12:44:05 +10:00
  • e5dbcb56a6 Merge pull request 'Import the stranded artifactapi access binding' (#35) from benvin/fix-artifactapi-policy-binding into main benvin 2026-09-08 00:11:37 +10:00
  • cd31cb6fa1 Import the artifactapi access binding stranded outside state unkin-agent 2026-09-07 23:49:48 +10:00
  • 4e164014d7 Merge pull request 'Onboard the artifactapi web UI to Authentik OIDC' (#34) from benvin/artifactapi-ui-oidc into main benvin 2026-09-07 19:59:42 +10:00
  • 0d17dc2cf1 Retrigger plan after credential seed unkin-agent 2026-09-07 17:44:02 +10:00
  • a6d6681bc9 Onboard the artifactapi web UI to Authentik OIDC unkin-agent 2026-09-07 13:59:45 +10:00
  • 93c634e4c4 Merge pull request 'Onboard repospawner UI to Authentik OIDC' (#32) from benvin/repospawner-oidc into main benvin 2026-08-31 22:21:09 +10:00
  • 3977f6f86b Merge remote-tracking branch 'origin/main' into benvin/repospawner-oidc unkin-agent 2026-08-31 22:07:36 +10:00
  • 6d014ce913 Merge pull request 'Onboard OpenBao as an Authentik OIDC client' (#33) from benvin/vault-oidc-provider into main benvin 2026-08-30 22:17:39 +10:00
  • 230db5ad7e Onboard OpenBao as an Authentik OIDC client unkin-agent 2026-08-30 21:25:39 +10:00
  • 2f80c4a536 Onboard repospawner UI to Authentik OIDC unkin-agent 2026-08-30 15:09:47 +10:00
  • 5ecd03cdd5 Merge pull request 'Namespace service account token map keys by account' (#31) from benvin/token-foreach-namespacing into main benvin 2026-08-30 00:03:11 +10:00
  • 0c6a9104c0 Namespace service account token map keys by account unkin-agent 2026-08-29 23:10:38 +10:00
  • 3884a5b21f Merge pull request 'Manage the agent API service account and token in Terraform' (#30) from benvin/agent-api-token-iac into main benvin 2026-08-29 23:04:04 +10:00
  • 8ec8bbda8e Manage the agent API service account and token in Terraform unkin-agent 2026-08-29 22:58:40 +10:00
  • 09f7c9042e Merge pull request 'Onboard mediamark to Authentik OIDC' (#29) from benvin/mediamark-oidc into main benvin 2026-08-29 21:55:34 +10:00
  • 1485962cf5 Fix mediamark Vault secret path and permission group name unkin-agent 2026-08-29 21:13:41 +10:00
  • 72e65d7810 Onboard mediamark to Authentik OIDC unkin-agent 2026-08-29 20:57:54 +10:00
  • e397fd909f Merge pull request 'Jellyfin SSO: cheeztv OIDC hosts, media-group gating, LDAP outpost' (#28) from benvin/jellyfin-sso into main benvin 2026-08-29 11:51:19 +10:00
  • 9760c2eb3f Fix KV path comment in jellyfin-ldap provider configuration. unkin-agent 2026-08-26 22:23:32 +10:00
  • 3396b399ce Jellyfin SSO: cheeztv OIDC hosts, media-group gating, LDAP outpost unkin-agent 2026-08-26 22:15:28 +10:00
  • 77adee64aa Merge pull request 'watchstate: add external watchstate.unkin.net redirect URI' (#27) from benvin/watchstate-external-uri into main benvin 2026-08-25 21:47:39 +10:00
  • 643c484dea watchstate: add external watchstate.unkin.net redirect URI unkin-agent 2026-08-25 21:42:26 +10:00
  • 31b92b2b93 Merge pull request 'Onboard watchstate into Authentik (oauth2-proxy, admin-team-gated)' (#26) from benvin/watchstate-oidc into main benvin 2026-08-25 20:48:01 +10:00
  • 00f835ac8c Retrigger plan: oauth-credentials kv secret now seeded unkin-agent 2026-08-25 20:15:49 +10:00
  • db5bf753b5 Onboard watchstate into Authentik for oauth2-proxy unkin-agent 2026-08-25 20:11:38 +10:00
  • 06e71604cf Merge pull request 'Add adult/kids media groups for media split' (#25) from benvin/media-groups into main benvin 2026-08-24 22:03:32 +10:00
  • ec0646657d Add adult/kids media groups for media split unkin-agent 2026-08-24 22:01:25 +10:00
  • ef84176633 Merge pull request 'Point identity env provider at in-cluster authentik-server ClusterIP' (#24) from benvin/incluster-provider-url into main benvin 2026-08-23 23:22:56 +10:00
  • ae679ab587 ci: move authentik_url ClusterIP override into woodpecker only unkin-agent 2026-08-23 23:20:32 +10:00
  • 218a640882 Point identity env provider at in-cluster authentik-server ClusterIP unkin-agent 2026-08-23 23:07:04 +10:00
  • 62fb15791a Merge pull request 'Add logviewer OAuth2 provider/application and akP-logviewer-admin permission' (#21) from benvin/logviewer-oidc into main benvin 2026-08-23 23:02:38 +10:00
  • 73378cef30 Merge pull request 'Run plan without acquiring the Consul state lock' (#22) from benvin/lockfree-plan into main benvin 2026-08-23 22:55:52 +10:00
  • c047ba3819 Merge pull request 'ci: fetch vault from artifactapi instead of dnf install' (#23) from benvin/vault-via-artifactapi into main benvin 2026-08-23 22:54:08 +10:00
  • 0480303db6 Merge origin/main (traefik #20) into benvin/logviewer-oidc unkin-agent 2026-08-23 22:48:36 +10:00
  • 5079d95ada Merge pull request 'Add traefik OAuth2 provider/application and akP-traefik-admin' (#20) from benvin/traefik-oidc into main benvin 2026-08-23 22:46:35 +10:00
  • 937efb0360 Merge origin/main (jellyfin #19) into benvin/logviewer-oidc unkin-agent 2026-08-23 22:41:11 +10:00
  • ef4d29d1ad ci: fetch vault from artifactapi instead of dnf install unkin-agent 2026-08-23 22:37:12 +10:00
  • aa1f8955c8 Run plan without acquiring the Consul state lock unkin-agent 2026-08-23 22:21:08 +10:00
  • 5f8dfc8450 ci: trigger pipeline on PR head unkin-agent 2026-08-23 22:17:54 +10:00
  • b4e3ef3149 ci: re-run plan after merge of main unkin-agent 2026-08-23 22:16:16 +10:00
  • c1eea2d441 Merge remote-tracking branch 'origin/main' into benvin/traefik-oidc unkin-agent 2026-08-23 22:14:06 +10:00
  • 5c136dfb96 Merge pull request 'Add Jellyfin OIDC provider, application and RBAC groups' (#19) from benvin/jellyfin-oidc into main benvin 2026-08-23 22:10:35 +10:00
  • 43d325146c Add logviewer OAuth2 provider/application and akP-logviewer-admin permission unkin-agent 2026-08-23 17:24:18 +10:00
  • 1872b82550 Add traefik OAuth2 provider/application and akP-traefik-admin permission unkin-agent 2026-08-23 12:35:17 +10:00
  • bbbb61777c Add Jellyfin OIDC provider, application and RBAC groups unkin-agent 2026-08-23 12:33:55 +10:00
  • 5f4b3557c1 Merge pull request 'add arrstack oauth app + per-app access groups' (#18) from benvin/arrstack-oauth into main benvin 2026-08-16 16:11:18 +10:00
  • 547cad6542 ci: re-run plan after oauth-credentials seed unkin-agent 2026-08-16 15:41:33 +10:00
  • e7c1f561f1 add arrstack oauth app + per-app access groups unkin-agent 2026-08-16 15:00:05 +10:00
  • 132da3cfc8 Merge pull request 'Set explicit launch URL for the LiteLLM application' (#16) from benvin/litellm-app-visibility into main benvin 2026-07-31 22:00:02 +10:00
  • 819996b0c7 Merge pull request 'Default OAuth2 providers to RS256 ID token signing' (#15) from benvin/oidc-rs256-signing into main benvin 2026-07-31 21:19:46 +10:00
  • a93205bc82 Set explicit launch URL for the LiteLLM application unkinben 2026-07-31 20:46:35 +10:00
  • b6e9b6b6b9 Default OAuth2 providers to RS256 ID token signing unkinben 2026-07-31 20:28:07 +10:00
  • d85d7afc97 Merge pull request 'Update Gitea OIDC redirect URIs to canonical + admin route' (#14) from benvin/gitea-oidc-hosts into main benvin 2026-07-31 20:09:16 +10:00
  • 1922014ab9 Update Gitea OIDC redirect URIs to canonical + admin route unkinben 2026-07-31 00:02:48 +10:00
  • ecfdf69d52 Merge pull request 'Add Gitea OAuth2/OIDC provider' (#13) from benvin/gitea-oidc into main benvin 2026-07-30 21:09:05 +10:00
  • 0ba2785eb5 Add Gitea OAuth2/OIDC provider + application unkinben 2026-07-29 22:01:58 +10:00
  • a5a2f467a4 Merge pull request 'Set OAuth2 grant_types so authorization_code login works' (#12) from benvin/oauth2-grant-types into main benvin 2026-07-28 22:38:57 +10:00
  • 2b39450ae2 Set OAuth2 grant_types so authorization_code login works unkinben 2026-07-28 22:09:06 +10:00
  • 21ef853a7c Merge pull request 'Add NetBox OAuth2/OIDC provider + application' (#11) from benvin/netbox-oidc into main benvin 2026-07-28 18:06:26 +10:00
  • e8d0457f00 ci: re-run after authentik api recovery unkinben 2026-07-28 17:48:03 +10:00
  • 7d0b8416a7 Re-trigger CI after seeding netbox oauth-credentials in Vault unkinben 2026-07-28 16:49:42 +10:00
  • 8fa4192cc6 Add NetBox OAuth2/OIDC provider + application unkinben 2026-07-28 16:44:52 +10:00
  • 90e0ff1f6a Merge pull request 'Add Ceph dashboard SAML provider' (#9) from benvin/ceph-saml into main benvin 2026-07-24 22:41:52 +10:00
  • bd2ead5855 Merge branch 'main' into benvin/ceph-saml benvin 2026-07-24 22:16:29 +10:00
  • 70c1d4f6ba Merge pull request 'Add LiteLLM RBAC: akP-litellm groups + role claim mapping' (#10) from benvin/litellm-rbac into main benvin 2026-07-19 22:00:59 +10:00
  • 7610627168 Add LiteLLM RBAC: akP-litellm groups + role claim mapping unkinben 2026-07-19 18:42:36 +10:00
  • a7ef454fba Merge pull request 'Add LiteLLM OAuth2/OIDC provider' (#8) from benvin/litellm-oidc into main benvin 2026-07-19 18:27:12 +10:00
  • 9c5937776e Add Ceph dashboard SAML provider unkinben 2026-07-19 02:22:23 +10:00
  • 9098c7dcfc Add LiteLLM OAuth2/OIDC provider unkinben 2026-07-19 02:19:19 +10:00
  • 14ad52b835 Merge pull request 'Add two-tier RBAC: permission/role groups, access policies, hierarchical group claim' (#7) from benvin/rbac-groups into main benvin 2026-07-19 02:13:28 +10:00
  • 805ea48a36 Derive group name from filename; use distinct ak_groups claim unkinben 2026-07-18 16:19:26 +10:00
  • 1dab2ecc6f Add two-tier RBAC: permission/role groups, access policies, group claim unkinben 2026-07-18 16:11:03 +10:00
  • 55ba291531 Merge pull request 'Add Rancher OAuth2/OIDC provider' (#6) from benvin/rancher-oidc into main benvin 2026-07-16 22:23:34 +10:00
  • 58e17d5ae8 Add Rancher OAuth2/OIDC provider unkinben 2026-07-15 20:59:38 +10:00