unkin/terraform-rancher
4
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Wire Rancher to Authentik ak_groups + akP-rancher global roles #2

Merged
benvin merged 1 commits from benvin/rancher-akgroups into main 2026-07-18 20:53:19 +10:00
Conversation 0 Commits 1 Files Changed 7
+46 -4

1 Commits

Author SHA1 Message Date
unkinben 80fa1b2844 Wire Rancher to Authentik ak_groups + akP-rancher global roles
ci/woodpecker/pr/pre-commit Pipeline was successful
Details
ci/woodpecker/pr/plan Pipeline was successful
Details 
Consume the two-tier Authentik RBAC (terraform-authentik): read the hierarchical
`ak_groups` claim and grant Rancher global roles to the akP-rancher permission
groups. Members of akR-global-admin/akR-standard-user inherit these.

- keycloakoidc: scopes += ak_groups; groups_field = ak_groups
- global_role_bindings: akP-rancher-admin -> admin, akP-rancher-user -> user
  (group principal keycloakoidc_group://<name>)
 2026-07-18 16:25:18 +10:00