Story Crater Bot 6c758e3606 feat: add poimen-memory-admins group/permissions and k8s RBAC role ...

Follows the portainer/kmsvc/temporal pattern - group + "permissions"
claim entry only, no Authentik Application/OAuth provider, since
poimen-memory is an internal API-key service, not browser OIDC login.
rock gets it automatically (already in every service_admin_group).

2026-08-25 21:50:05 -07:00

..

databases

feat: deploy Immich with Authentik OIDC, rock as admin

2026-08-25 18:21:28 -07:00

forgejo-runner

feat(forgejo-runner): split into golang/node/rust runners, retire generic docker runner

2026-08-21 16:49:26 -07:00

iam

feat: add poimen-memory-admins group/permissions and k8s RBAC role

2026-08-25 21:50:05 -07:00

logging

fix(grafana): add email/login/name_attribute_path for Authentik OIDC — Grafana was falling back to GitHub-style <api_url>/emails (404 'Error getting email address'), breaking OAuth login; read identity from userinfo claims instead

2026-08-18 15:08:04 -07:00

longhorn

fix: add Replace=true sync-option to paperless-media StorageClass

2026-08-25 11:47:33 -07:00

minio

feat: add paperless-ngx with OIDC, CNPG db, cp-3 HDD media, MinIO backup

2026-08-25 11:11:37 -07:00

monitoring

feat: cut api.riotpiao.com over to the Go gateway and retire Kong

2026-08-19 22:51:53 -07:00

rbac

feat: add poimen-memory-admins group/permissions and k8s RBAC role

2026-08-25 21:50:05 -07:00