unkinben
80fa1b2844
Consume the two-tier Authentik RBAC (terraform-authentik): read the hierarchical `ak_groups` claim and grant Rancher global roles to the akP-rancher permission groups. Members of akR-global-admin/akR-standard-user inherit these. - keycloakoidc: scopes += ak_groups; groups_field = ak_groups - global_role_bindings: akP-rancher-admin -> admin, akP-rancher-user -> user (group principal keycloakoidc_group://<name>)
23 lines
395 B
HCL
23 lines
395 B
HCL
include "root" {
|
|
path = find_in_parent_folders("root.hcl")
|
|
expose = true
|
|
}
|
|
|
|
include "config" {
|
|
path = "${get_repo_root()}/config/config.hcl"
|
|
expose = true
|
|
}
|
|
|
|
locals {
|
|
config = include.config.locals.config
|
|
}
|
|
|
|
terraform {
|
|
source = "../../modules/rancher"
|
|
}
|
|
|
|
inputs = {
|
|
keycloakoidc = local.config.keycloakoidc
|
|
global_role_bindings = local.config.global_role_bindings
|
|
}
|