 rock
|
d146f7e3af
|
iam: add memory scope + service accounts to Authentik
- Add 'memory' scope property mapping with claims:
- memory_projects: project-level access filter
- memory_visibility: public/private visibility
- memory_role: admin/user/portfolio-agent
- Add capability groups: llm-users, memory-users, memory-writers
- Add service account provisioning for portfolio-agent, memory-agent
- Service accounts use client_credentials flow
- Add homelab-rbac.md design doc (Authentik-centric model)
|
2026-09-03 16:27:39 -07:00 |
|