redeploy authentic policies as code.

2026-03-21 14:00:37 -05:00
parent 9ad585681f
commit c087f32355
26 changed files with 1408 additions and 240 deletions
--- a/ansible/playbooks/roles/authentik/templates/env.j2
+++ b/ansible/playbooks/roles/authentik/templates/env.j2
@@ -2,3 +2,10 @@
 AUTHENTIK_SECRET_KEY={{ authentik_secret_key }}
 DATABASE_PASSWORD={{ authentik_database_password }}
 AUTHENTIK_ADMIN_PASSWORD={{ authentik_admin_password }}
+
+# OIDC client credentials for blueprints
+# These are substituted into blueprint YAML via ${VAR} syntax
+PROXMOX_OIDC_CLIENT_ID={{ vault_proxmox_oidc_client_id }}
+PROXMOX_OIDC_CLIENT_SECRET={{ vault_proxmox_oidc_client_secret }}
+STEPCA_OIDC_CLIENT_ID={{ vault_stepca_oidc_client_id }}
+STEPCA_OIDC_CLIENT_SECRET={{ vault_stepca_oidc_client_secret }}