infra
/
tf
2
0
Fork 0
Code Pull Requests Activity

fix grafana group-based permissions

This commit is contained in:
Jan Koppe 2024-02-24 13:44:06 +01:00
parent dcff0a43aa
commit 3a900084b3
Signed by: thunfisch
GPG Key ID: BE935B0735A2129B
3 changed files with 3 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
modules/swarm/grafana/cfg/grafana.ini
View File

@ -390,7 +390,7 @@ api_url = https://authentik.montage2.de/application/o/userinfo/
;allowed_domains = ;allowed_domains =
;team_ids = ;team_ids =
;allowed_organizations = ;allowed_organizations =
role_attribute_path = contains(groups[*], 'Montage2 Admin') && 'Admin' || contains(groups[*], 'Montage2 Member') && 'Editor' || 'Viewer' role_attribute_path = contains(groups[*], 'cwtv-admin') && 'Admin' || contains(groups[*], 'cwtv-member') && 'Editor' || 'Viewer'
;tls_skip_verify_insecure = false ;tls_skip_verify_insecure = false
;tls_client_cert = ;tls_client_cert =
;tls_client_key = ;tls_client_key =

1
stacks/ax41-1/.terraform.lock.hcl
View File

@ -42,7 +42,6 @@ provider "registry.terraform.io/kreuzwerker/docker" {
version = "3.0.2" version = "3.0.2"
constraints = "~> 3.0" constraints = "~> 3.0"
hashes = [ hashes = [
"h1:cT2ccWOtlfKYBUE60/v2/4Q6Stk1KYTNnhxSck+VPlU=",
"h1:tryCE8s9BiT6VyfnGgU1mUt9s0HcCKlRERdLd2fr010=", "h1:tryCE8s9BiT6VyfnGgU1mUt9s0HcCKlRERdLd2fr010=",
"zh:15b0a2b2b563d8d40f62f83057d91acb02cd0096f207488d8b4298a59203d64f", "zh:15b0a2b2b563d8d40f62f83057d91acb02cd0096f207488d8b4298a59203d64f",
"zh:23d919de139f7cd5ebfd2ff1b94e6d9913f0977fcfc2ca02e1573be53e269f95", "zh:23d919de139f7cd5ebfd2ff1b94e6d9913f0977fcfc2ca02e1573be53e269f95",

2
stacks/ax41-1/README.md
View File

@ -4,6 +4,7 @@
| Name | Version | | Name | Version |
|------|---------| |------|---------|
| <a name="requirement_terraform"></a> [terraform](#requirement\_terraform) | 1.5.5 | | <a name="requirement_terraform"></a> [terraform](#requirement\_terraform) | 1.5.5 |
| <a name="requirement_authentik"></a> [authentik](#requirement\_authentik) | ~>2023.10.0 |
| <a name="requirement_docker"></a> [docker](#requirement\_docker) | ~>3.0 | | <a name="requirement_docker"></a> [docker](#requirement\_docker) | ~>3.0 |
| <a name="requirement_hetznerdns"></a> [hetznerdns](#requirement\_hetznerdns) | ~>2.2 | | <a name="requirement_hetznerdns"></a> [hetznerdns](#requirement\_hetznerdns) | ~>2.2 |
| <a name="requirement_sops"></a> [sops](#requirement\_sops) | ~>1.0 | | <a name="requirement_sops"></a> [sops](#requirement\_sops) | ~>1.0 |
@ -28,6 +29,7 @@
| <a name="module_shit"></a> [shit](#module\_shit) | ../../modules/swarm/shit | n/a | | <a name="module_shit"></a> [shit](#module\_shit) | ../../modules/swarm/shit | n/a |
| <a name="module_spaceapi"></a> [spaceapi](#module\_spaceapi) | ../../modules/swarm/spaceapi | n/a | | <a name="module_spaceapi"></a> [spaceapi](#module\_spaceapi) | ../../modules/swarm/spaceapi | n/a |
| <a name="module_traefik"></a> [traefik](#module\_traefik) | ../../modules/swarm/traefik | n/a | | <a name="module_traefik"></a> [traefik](#module\_traefik) | ../../modules/swarm/traefik | n/a |
| <a name="module_wekan"></a> [wekan](#module\_wekan) | ../../modules/swarm/wekan | n/a |
## Resources ## Resources