rock 6ec61d1c2c feat: add OIDC group binding for cluster-admin access ...

- Binds oidc:homelab-admins group to cluster-admin ClusterRole
- Allows OIDC users (via Authentik) to have admin access
- Groups claim from Authentik with oidc: prefix per kube-apiserver config
- Enables kubectl access via 'kubectl login' + kubelogin

2026-09-05 14:30:41 -07:00

..

admin-oidc-binding.yaml

feat: add OIDC group binding for cluster-admin access

2026-09-05 14:30:41 -07:00

forgejo-operator-role.yaml

feat: add homelab-wide Authentik RBAC model and k8s OIDC auth wiring

2026-08-25 15:03:44 -07:00

grafana-operator-role.yaml

feat: add homelab-wide Authentik RBAC model and k8s OIDC auth wiring

2026-08-25 15:03:44 -07:00

homarr-operator-role.yaml

feat: add homelab-wide Authentik RBAC model and k8s OIDC auth wiring

2026-08-25 15:03:44 -07:00

kmsvc-operator-role.yaml

feat: add ServiceAccounts for poimen-memory/kmsvc/immich operator Roles

2026-08-26 19:51:05 -07:00

kustomization.yaml

feat: add poimen-memory-admins group/permissions and k8s RBAC role

2026-08-25 21:50:05 -07:00

llm-serving-operator-role.yaml

feat: add homelab-wide Authentik RBAC model and k8s OIDC auth wiring

2026-08-25 15:03:44 -07:00

minio-operator-role.yaml

feat: add homelab-wide Authentik RBAC model and k8s OIDC auth wiring

2026-08-25 15:03:44 -07:00

poimen-memory-operator-role.yaml

feat: add ServiceAccounts for poimen-memory/kmsvc/immich operator Roles

2026-08-26 19:51:05 -07:00

portainer-operator-role.yaml

feat: add homelab-wide Authentik RBAC model and k8s OIDC auth wiring

2026-08-25 15:03:44 -07:00

temporal-operator-role.yaml

feat: add homelab-wide Authentik RBAC model and k8s OIDC auth wiring

2026-08-25 15:03:44 -07:00