From c27e1149a1ff165c290bcd8721d905fc68be0cfc Mon Sep 17 00:00:00 2001 From: Joe Banks Date: Wed, 10 Apr 2024 15:06:03 +0100 Subject: Expand permission checks for Grafana --- kubernetes/namespaces/default/grafana/configmap.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'kubernetes/namespaces/default/grafana') diff --git a/kubernetes/namespaces/default/grafana/configmap.yaml b/kubernetes/namespaces/default/grafana/configmap.yaml index 7e4e063..a424c92 100644 --- a/kubernetes/namespaces/default/grafana/configmap.yaml +++ b/kubernetes/namespaces/default/grafana/configmap.yaml @@ -14,7 +14,7 @@ data: GF_AUTH_GITHUB_SCOPES: "user:email,read:org" # IDs can be retrieved via `gh api orgs/python-discord/teams`. GF_AUTH_GITHUB_TEAM_IDS: "2638565,3854739,3114246,7361120,9120709" - GF_AUTH_GITHUB_ROLE_ATTRIBUTE_PATH: "contains(groups[*], ['@python-discord/directors', '@python-discord/sudo-devops']) && 'Admin' || contains(groups[*], '@python-discord/admins') && 'Editor' || 'Viewer'" + GF_AUTH_GITHUB_ROLE_ATTRIBUTE_PATH: "contains(groups[*], '@python-discord/directors') && 'Admin' || contains(groups[*], '@python-discord/sudo-devops') && 'Admin' || contains(groups[*], '@python-discord/admins') && 'Editor' || 'Viewer'" GF_AUTH_GITHUB_AUTH_URL: "https://github.com/login/oauth/authorize" GF_AUTH_GITHUB_TOKEN_URL: "https://github.com/login/oauth/access_token" GF_AUTH_GITHUB_API_URL: "https://api.github.com/user" -- cgit v1.2.3