terraform-authentik/config/roles/akR-global-admin.yaml at d85d7afc97791067a788812f45e8a68ec10328bb - terraform-authentik - Gitea

unkin/terraform-authentik

Files

T

unkinben 7610627168

ci/woodpecker/pr/pre-commit Pipeline was successful

Details

ci/woodpecker/pr/plan Pipeline was successful

Details

Add LiteLLM RBAC: akP-litellm groups + role claim mapping

Bring LiteLLM into the two-tier RBAC and map groups to LiteLLM roles.

- akP-litellm-admin / akP-litellm-user permission groups (bound to the litellm
  app for access); added to akR-global-admin / akR-standard-user roles.
- Generic per-provider role_mappings: emit an app role claim computed from
  effective (hierarchical) group membership. LiteLLM: emits `litellm_role`
  (proxy_admin for akP-litellm-admin, internal_user for akP-litellm-user, else
  internal_user_view_only); LiteLLM reads it via GENERIC_USER_ROLE_ATTRIBUTE.

Validated: plan 5 to add, 3 to change; generated role expression renders correctly.

2026-07-19 18:42:36 +10:00

7 lines

181 B

YAML

Raw Blame History

 # Role akR-global-admin (name = filename): full admin across all onboarded apps.
 permissions:
   - akP-grafana-admin
   - akP-argocd-admin
   - akP-rancher-admin
   - akP-litellm-admin