rock
f1e5fe58f4
- Move authentik-provision.py to scripts/iam/ (manual-only) - Remove job/RBAC resources (not needed for local runs) - Use public URL directly (no sed substitution needed) - Add app password support via set_key endpoint - Support both password grant and client_credentials
13 lines
420 B
YAML
13 lines
420 B
YAML
apiVersion: kustomize.config.k8s.io/v1beta1
|
|
kind: Kustomization
|
|
|
|
resources:
|
|
- rbac-dashboard-rolebinding.yaml
|
|
|
|
# IAM provisioning is manual-only (security-sensitive).
|
|
# Script: scripts/iam/authentik-provision.py
|
|
# Run:
|
|
# export AUTHENTIK_BOOTSTRAP_TOKEN=$(kubectl -n iam get secret authentik-secrets \
|
|
# -o jsonpath='{.data.AUTHENTIK_BOOTSTRAP_TOKEN}' | base64 -d)
|
|
# python3 scripts/iam/authentik-provision.py
|