From 9f0b64b7a476557d1c1241a053b067a4750ee0f9 Mon Sep 17 00:00:00 2001 From: Daniel Sy Date: Wed, 13 Aug 2025 15:20:52 +0200 Subject: [PATCH] =?UTF-8?q?fix(grafana):=20=F0=9F=94=A7=20Update=20role=20?= =?UTF-8?q?attribute=20for=20Grafana=20access?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Updates the role attribute path in the Grafana manifest to specify 'GrafanaAdmin' instead of 'Admin' for user group permissions. This change improves access control by aligning roles with Grafana's intended user management. --- .../observability/grafana-operator/manifests/grafana.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/otc/observability.t09.de/stacks/observability/grafana-operator/manifests/grafana.yaml b/otc/observability.t09.de/stacks/observability/grafana-operator/manifests/grafana.yaml index bd9f027..6de1443 100644 --- a/otc/observability.t09.de/stacks/observability/grafana-operator/manifests/grafana.yaml +++ b/otc/observability.t09.de/stacks/observability/grafana-operator/manifests/grafana.yaml @@ -57,4 +57,4 @@ spec: token_url: https://dex.observability.t09.de/token api_url: https://dex.observability.t09.de/userinfo redirect_uri: https://grafana.observability.t09.de/login/generic_oauth - role_attribute_path: "contains(groups[*], 'DevFW') && 'Admin'" + role_attribute_path: "contains(groups[*], 'DevFW') && 'GrafanaAdmin'"