From e12327f96399ffca7b5bcbfce437e22790d045eb Mon Sep 17 00:00:00 2001 From: rock Date: Tue, 15 Sep 2026 00:37:06 +0900 Subject: [PATCH] fix(grafana): re-enable org role sync for OAuth groups Re-enable skip_org_role_sync=false to sync Admin role from grafana-admins group. User creation worked with skip_org_role_sync=true, now restore role sync. --- k8s/infra/logging/grafana-values.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/k8s/infra/logging/grafana-values.yaml b/k8s/infra/logging/grafana-values.yaml index 37bbf20..cef8e08 100644 --- a/k8s/infra/logging/grafana-values.yaml +++ b/k8s/infra/logging/grafana-values.yaml @@ -90,7 +90,7 @@ grafana.ini: allow_assign_grafana_admin: true use_pkce: false use_refresh_token: false - skip_org_role_sync: true # Skip org role sync to allow first-time user creation + skip_org_role_sync: false # Sync org roles from OAuth groups tls_skip_verify_insecure: true # Authentik uses self-signed cert; verify in prod # GF_AUTH_GENERIC_OAUTH_CLIENT_SECRET is injected from the grafana-oidc K8s