unkinben 9098c7dcfc Add LiteLLM OAuth2/OIDC provider ...

SSO for LiteLLM (litellm.k8s.syd1.au.unkin.net) via Authentik generic OIDC.
Confidential OAuth2 provider + application, openid/email/profile scopes,
/sso/callback redirect. client_secret read from Vault at
kv/kubernetes/namespace/litellm/default/oauth-credentials (seeded).

2026-07-19 02:19:19 +10:00

..

groups

Add argocd-admins group

2026-07-12 22:58:32 +10:00

permissions

Derive group name from filename; use distinct ak_groups claim

2026-07-18 16:19:34 +10:00

providers_oauth2

Add LiteLLM OAuth2/OIDC provider

2026-07-19 02:19:19 +10:00

roles

Derive group name from filename; use distinct ak_groups claim

2026-07-18 16:19:34 +10:00

config.hcl

Add two-tier RBAC: permission/role groups, access policies, group claim

2026-07-18 16:11:39 +10:00