terraform-rancher/config/global_role_bindings/akP-rancher-admin.yaml at 80fa1b284423e94070ef8fbd7494c051eb10be0e - terraform-rancher - Gitea

unkin/terraform-rancher

Files

T

unkinben 80fa1b2844

ci/woodpecker/pr/pre-commit Pipeline was successful

Details

ci/woodpecker/pr/plan Pipeline was successful

Details

Wire Rancher to Authentik ak_groups + akP-rancher global roles

Consume the two-tier Authentik RBAC (terraform-authentik): read the hierarchical
`ak_groups` claim and grant Rancher global roles to the akP-rancher permission
groups. Members of akR-global-admin/akR-standard-user inherit these.

- keycloakoidc: scopes += ak_groups; groups_field = ak_groups
- global_role_bindings: akP-rancher-admin -> admin, akP-rancher-user -> user
  (group principal keycloakoidc_group://<name>)

2026-07-18 16:25:18 +10:00

4 lines

137 B

YAML

Raw Blame History

	`# akP-rancher-admin -> Rancher global admin. Granted to akR-global-admin members`
	`# (inherited) and direct members.`
	`global_role_id: admin`