From b03098aa1c3fdb66822566a933bd34c7ae5752ce Mon Sep 17 00:00:00 2001 From: rock Date: Tue, 15 Sep 2026 00:32:41 +0900 Subject: [PATCH] fix(grafana): skip_org_role_sync on first login Set skip_org_role_sync=true to allow user creation on first OAuth signin. When false, Grafana tries to sync org roles before user exists, causing creation to fail. --- k8s/infra/logging/grafana-values.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/k8s/infra/logging/grafana-values.yaml b/k8s/infra/logging/grafana-values.yaml index 2e2d3e6..37bbf20 100644 --- a/k8s/infra/logging/grafana-values.yaml +++ b/k8s/infra/logging/grafana-values.yaml @@ -90,7 +90,7 @@ grafana.ini: allow_assign_grafana_admin: true use_pkce: false use_refresh_token: false - skip_org_role_sync: false + skip_org_role_sync: true # Skip org role sync to allow first-time user creation tls_skip_verify_insecure: true # Authentik uses self-signed cert; verify in prod # GF_AUTH_GENERIC_OAUTH_CLIENT_SECRET is injected from the grafana-oidc K8s