eblume/blumeops
1
1
Fork 0
Code Issues Pull requests Projects Releases 83 Packages Wiki Activity Actions
blumeops/argocd/manifests
History
Erich Blume 07fb48626d Add Authentik SSO integration for Jellyfin (#239) 
## Summary
- Add Authentik OIDC provider + application for Jellyfin via blueprint (all authenticated users allowed, no policy binding)
- Wire `jellyfin-client-secret` through ExternalSecret and Authentik worker deployment
- Install [jellyfin-plugin-sso](https://github.com/9p4/jellyfin-plugin-sso) v4.0.0.3 via Ansible, with OIDC config template
- Authentik `admins` group maps to Jellyfin administrator role
- Local login left enabled; SSO is additive

## Deployment and Testing
- [ ] Sync ArgoCD `authentik` app on branch — verify provider + application appear in Authentik admin
- [ ] `mise run provision-indri -- --tags jellyfin --check --diff` (dry run)
- [ ] `mise run provision-indri -- --tags jellyfin` (deploy plugin + config)
- [ ] Test SSO flow: `https://jellyfin.ops.eblu.me/sso/OID/start/authentik`
- [ ] Verify `eblume` account auto-links via `preferred_username` match
- [ ] Verify admins group → Jellyfin admin
- [ ] Reset ArgoCD app revision to main after merge

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Reviewed-on: https://forge.ops.eblu.me/eblume/blumeops/pulls/239
2026-02-21 20:05:44 -08:00
..
1password-connect Fix 1Password Connect credentials for chart 2.3.0 2026-02-13 17:30:45 -08:00
alloy-k8s Tier 1 version bumps (#186) 2026-02-13 17:16:37 -08:00
argocd Deploy Frigate NVR stack with Mosquitto, Ntfy, and frigate-notify (#190) 2026-02-14 21:27:44 -08:00
authentik Add Authentik SSO integration for Jellyfin (#239) 2026-02-21 20:05:44 -08:00
cloudnative-pg K8s Migration Phase 1: Infrastructure Setup (#29) 2026-01-19 09:49:52 -08:00
cv Update all container images to new upstream-version tagging scheme (#238) 2026-02-21 15:58:11 -08:00
databases Deploy Authentik identity provider (C2 Mikado) (#227) 2026-02-20 12:55:59 -08:00
devpi Update all container images to new upstream-version tagging scheme (#238) 2026-02-21 15:58:11 -08:00
docs Update all container images to new upstream-version tagging scheme (#238) 2026-02-21 15:58:11 -08:00
external-secrets Add External Secrets Operator with 1Password Connect (#66) (#66) 2026-01-28 19:30:10 -08:00
forgejo-runner Update all container images to new upstream-version tagging scheme (#238) 2026-02-21 15:58:11 -08:00
frigate Update Frigate zone masks and expand alert notifications (#219) 2026-02-19 17:32:02 -08:00
grafana Deploy Authentik identity provider (C2 Mikado) (#227) 2026-02-20 12:55:59 -08:00
grafana-config Deploy Authentik identity provider (C2 Mikado) (#227) 2026-02-20 12:55:59 -08:00
homepage Fix container tags deleted during old-tag cleanup 2026-02-21 16:26:29 -08:00
immich Recategorize homepage into Content and Misc groups (#179) 2026-02-13 09:09:22 -08:00
kiwix Fix container tags deleted during old-tag cleanup 2026-02-21 16:26:29 -08:00
kube-state-metrics Tier 1 version bumps (#186) 2026-02-13 17:16:37 -08:00
loki Tier 1 version bumps (#186) 2026-02-13 17:16:37 -08:00
miniflux Fix container tags deleted during old-tag cleanup 2026-02-21 16:26:29 -08:00
mosquitto Fix mosquitto image tag: use 2.0.22 instead of nonexistent 2.1.2 (#198) 2026-02-16 17:19:32 -08:00
navidrome Fix container tags deleted during old-tag cleanup 2026-02-21 16:26:29 -08:00
ntfy Update all container images to new upstream-version tagging scheme (#238) 2026-02-21 15:58:11 -08:00
nvidia-device-plugin Port Frigate NVR to ringtail k3s with GPU acceleration (#217) 2026-02-19 14:27:04 -08:00
prometheus Deploy Frigate NVR stack with Mosquitto, Ntfy, and frigate-notify (#190) 2026-02-14 21:27:44 -08:00
tailscale-operator Deploy Tailscale operator on ringtail k3s cluster (#215) 2026-02-19 09:33:05 -08:00
tailscale-operator-base Deploy Tailscale operator on ringtail k3s cluster (#215) 2026-02-19 09:33:05 -08:00
tailscale-operator-ringtail Deploy Tailscale operator on ringtail k3s cluster (#215) 2026-02-19 09:33:05 -08:00
teslamate Update all container images to new upstream-version tagging scheme (#238) 2026-02-21 15:58:11 -08:00
torrent Update all container images to new upstream-version tagging scheme (#238) 2026-02-21 15:58:11 -08:00