terraform-authentik/config/permissions/akP-traefik-admin.yaml at 0480303db65d332d665923f774b18d440f57389d - terraform-authentik - Gitea

unkin/terraform-authentik

Files

T

unkin-agent 1872b82550

ci/woodpecker/pr/pre-commit Pipeline was successful

Details

ci/woodpecker/pr/plan Pipeline was successful

Details

Add traefik OAuth2 provider/application and akP-traefik-admin permission

The traefik dashboards (internal + external ingress classes) are being
exposed behind oauth2-proxy; this adds the Authentik side as the
prerequisite.

- Adds config/providers_oauth2/traefik.yaml mirroring arrstack: confidential
  client, client_id traefik, secret from Vault kv
  kubernetes/namespace/traefik-system/default/oauth-credentials,
  openid/email/profile scopes (ak_groups is attached to every oauth2
  provider by the module), strict redirect URIs for
  traefik-internal/traefik-external oauth2 callbacks.
- Adds config/permissions/akP-traefik-admin.yaml bound to the traefik
  application and nests it under akR-global-admin.

2026-08-23 12:35:17 +10:00

4 lines

168 B

YAML

Raw Blame History

	`# Permission group akP-traefik-admin (name = filename). Grants admin`
	`# access to traefik: bound to the traefik application, gating the dashboards.`
	`application: traefik`