Files
terraform-authentik/config/roles/akR-global-admin.yaml
T
unkin-agent 3977f6f86b
ci/woodpecker/pr/pre-commit Pipeline was successful
ci/woodpecker/pr/plan Pipeline was successful
Merge remote-tracking branch 'origin/main' into benvin/repospawner-oidc
# Conflicts:
#	config/roles/akR-global-admin.yaml
2026-08-31 22:07:36 +10:00

19 lines
576 B
YAML

# Role akR-global-admin (name = filename): full admin across all onboarded apps.
permissions:
- akP-grafana-admin
- akP-argocd-admin
- akP-rancher-admin
- akP-litellm-admin
- akP-jellyfin-admin
- akP-traefik-admin
- akP-logviewer-admin
- akP-watchstate-admin
- akP-repospawner-admin
- akP-vault-admin
# arrstack has no admin tier (it is a proxy front door); grant global admins
# the front door plus every per-app entitlement so they reach all media apps.
- akP-arrstack-user
- akP-arrstack-sonarr
- akP-arrstack-radarr
- akP-arrstack-prowlarr