9 Commits

Include renames

Author	SHA1	Message	Date
rock	467b3441c9	fix(grafana): use email for OAuth login lookup instead of preferred_username ... - Change login_attribute_path from preferred_username to email for stable user matching - Enable allow_sign_up to permit OAuth user sync with existing local users - Root cause: Authentik's 'rock' user matches existing Grafana 'rock' by email, not by preferred_username claim	2026-09-15 00:01:10 +09:00
rock	e0c08a90b3	Grafana OAuth: disable allow_sign_up to debug user.sync failure	2026-09-14 23:56:04 +09:00
rock	e41165f358	fix(grafana): give homelab-admins Admin org role, akadmin GrafanaAdmin ... GrafanaAdmin is server admin only — no org membership, so users couldn't see dashboards. Now: - akadmin: GrafanaAdmin (server admin, can impersonate) - homelab-admins: Admin (org admin, dashboard access) - others: Viewer	2026-09-04 23:41:22 -07:00
rock	bd8c9fe033	fix: grant GrafanaAdmin (server admin) to homelab-admins for Administration menu	2026-09-04 23:18:19 -07:00
rock	2eda66c095	fix: add groups scope to grafana OIDC so role mapping works	2026-09-04 23:14:11 -07:00
rock	60786a17ea	fix: map grafana admin role from homelab-admins group (grafana-admins deleted)	2026-09-04 23:04:01 -07:00
rock	4af000c6ae	feat(integrations): add NextJS LLM/Grafana integration + enable dashboard embedding	2026-08-31 20:22:26 -07:00
Story Crater Bot	72f24165cc	fix(grafana): add email/login/name_attribute_path for Authentik OIDC — Grafana was falling back to GitHub-style <api_url>/emails (404 'Error getting email address'), breaking OAuth login; read identity from userinfo claims instead	2026-08-18 15:08:04 -07:00
Story Crater Bot	41f5b05395	refactor(k8s): consolidate to infra/+apps/ single-source tree, dedicated per-app CNPG (authentik-db/temporal-db), wire monitoring-config, forgejo→cicd ns, drop orphan/stale (data-schemas, ollama, story-crater, sqs/argocd, key-rotation)	2026-08-18 15:08:03 -07:00