unkin/terraform-authentik
4
0
Fork 0
Code Issues 1 Pull Requests Actions Packages Projects Releases Wiki Activity

Add NetBox OAuth2/OIDC provider + application #11

Merged
benvin merged 3 commits from benvin/netbox-oidc into main 2026-07-28 18:06:27 +10:00
Conversation 1 Commits 3 Files Changed 1
+19

3 Commits

Author SHA1 Message Date
unkinben e8d0457f00 ci: re-run after authentik api recovery
ci/woodpecker/pr/pre-commit Pipeline was successful
Details
ci/woodpecker/pr/plan Pipeline was successful
Details 
The plan step failed on transient authentik API 500s while refreshing
unrelated existing applications; the API is healthy again (200).

Claude-Session: https://claude.ai/code/session_015ur3i7D2azsMAWTSVABApv
 2026-07-28 17:48:03 +10:00
unkinben 7d0b8416a7 Re-trigger CI after seeding netbox oauth-credentials in Vault
ci/woodpecker/pr/pre-commit Pipeline was successful
Details
ci/woodpecker/pr/plan Pipeline failed
Details 
The plan step reads the netbox client_secret from Vault at plan time; it now
exists at kv/kubernetes/namespace/netbox/default/oauth-credentials.

Claude-Session: https://claude.ai/code/session_015ur3i7D2azsMAWTSVABApv
 2026-07-28 16:49:42 +10:00
unkinben 8fa4192cc6 Add NetBox OAuth2/OIDC provider + application
ci/woodpecker/pr/pre-commit Pipeline was successful
Details
ci/woodpecker/pr/plan Pipeline failed
Details 
NetBox is being deployed to k8s (argocd-apps) with Authentik SSO via
python-social-auth's OpenIdConnectAuth backend. Add the confidential OAuth2
provider/application (client_id netbox, openid/email/profile scopes, strict
redirect to /oauth/complete/oidc/); the client_secret is read from Vault at
kubernetes/namespace/netbox/default/oauth-credentials (the terraform-authentik
runner policy already covers namespace/+/default/oauth-credentials).

Claude-Session: https://claude.ai/code/session_015ur3i7D2azsMAWTSVABApv
 2026-07-28 16:44:52 +10:00