From 22c5ff75c8f91063490e89fa971e223a3c6cedb4 Mon Sep 17 00:00:00 2001 From: Daniel Sy Date: Wed, 13 Aug 2025 14:38:34 +0200 Subject: [PATCH] =?UTF-8?q?fix:=20=F0=9F=94=92=EF=B8=8F=20Remove=20sensiti?= =?UTF-8?q?ve=20role=20attribute=20path=20from=20config?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Remove the role attribute path from Grafana configuration to enhance security by preventing exposure of user role mappings. This change ensures that sensitive information remains protected while maintaining functionality. --- .../observability/grafana-operator/manifests/grafana.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/otc/observability.t09.de/stacks/observability/grafana-operator/manifests/grafana.yaml b/otc/observability.t09.de/stacks/observability/grafana-operator/manifests/grafana.yaml index d87d9da..bf8484c 100644 --- a/otc/observability.t09.de/stacks/observability/grafana-operator/manifests/grafana.yaml +++ b/otc/observability.t09.de/stacks/observability/grafana-operator/manifests/grafana.yaml @@ -57,4 +57,4 @@ spec: token_url: https://dex.observability.t09.de/token api_url: https://dex.observability.t09.de/userinfo redirect_uri: https://grafana.observability.t09.de/login/generic_oauth - role_attribute_path: "contains(groups[*], 'admin') && 'Admin' || contains(groups[*], 'editor') && 'Editor' || 'Viewer'" + # role_attribute_path: ""