feat: add poimen-memory-admins group/permissions and k8s RBAC role

Follows the portainer/kmsvc/temporal pattern - group + "permissions"
claim entry only, no Authentik Application/OAuth provider, since
poimen-memory is an internal API-key service, not browser OIDC login.
rock gets it automatically (already in every service_admin_group).
This commit is contained in:
Story Crater Bot
2026-08-25 21:50:05 -07:00
parent 7f0541a8dc
commit 6c758e3606
3 changed files with 37 additions and 1 deletions
+1
View File
@@ -14,6 +14,7 @@ resources:
- kmsvc-operator-role.yaml
- temporal-operator-role.yaml
- llm-serving-operator-role.yaml
- poimen-memory-operator-role.yaml
# paperless's Role/RoleBinding lives in k8s/apps/paperless/rbac.yaml instead -
# that app already has its own kustomization + namespace, no need to
# duplicate it here. All of these stay inert (grant nothing) until