- Add Authentik Blueprint (ConfigMap) defining Grafana OAuth2 provider, application, admins group, and policy binding - Mount blueprint in worker, pass grafana client secret via env - Switch Grafana auth.generic_oauth from Dex to Authentik endpoints - Replace dex-oauth ExternalSecret with authentik-oauth Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
13 lines
301 B
YAML
13 lines
301 B
YAML
---
|
|
apiVersion: kustomize.config.k8s.io/v1beta1
|
|
kind: Kustomization
|
|
namespace: authentik
|
|
resources:
|
|
- external-secret.yaml
|
|
- configmap-blueprint.yaml
|
|
- deployment-server.yaml
|
|
- deployment-worker.yaml
|
|
- deployment-redis.yaml
|
|
- service.yaml
|
|
- service-redis.yaml
|
|
- ingress-tailscale.yaml
|