unkinben
58e17d5ae8
ci/woodpecker/pr/pre-commit Pipeline was successful
ci/woodpecker/pr/plan Pipeline was successful
Add Rancher OAuth2/OIDC provider
Extends Authentik SSO to Rancher (rancher.k8s.syd1.au.unkin.net) so cluster
access uses Authentik identity and groups.
- Add config/providers_oauth2/rancher.yaml: confidential OAuth2 provider +
application (slug rancher), openid/email/profile scopes, /verify-auth
redirect (Rancher's OIDC callback). client_secret read from Vault at
kv/kubernetes/namespace/cattle-system/default/oauth-credentials.