rock d146f7e3af iam: add memory scope + service accounts to Authentik ...

- Add 'memory' scope property mapping with claims:
  - memory_projects: project-level access filter
  - memory_visibility: public/private visibility
  - memory_role: admin/user/portfolio-agent
- Add capability groups: llm-users, memory-users, memory-writers
- Add service account provisioning for portfolio-agent, memory-agent
- Service accounts use client_credentials flow
- Add homelab-rbac.md design doc (Authentik-centric model)

2026-09-03 16:27:39 -07:00

..

apps

kmsvc: migrate image from GHCR to Forgejo registry

2026-09-02 20:12:35 -07:00

argocd

messaging: remove queue-crd/management-service (moved to kmsvc-manage)

2026-09-03 08:28:38 -07:00

bootstrap

feat(security): add Kyverno for image scanning and Pod security policies

2026-08-31 11:43:04 -07:00

infra

iam: add memory scope + service accounts to Authentik

2026-09-03 16:27:39 -07:00