configure open webui to use sso from authentik

2026-03-16 17:30:16 +01:00
parent c2706a8af2
commit a2a5cd72a9
5 changed files with 80 additions and 0 deletions
--- a/vault/kubernetes-roles/openwebui.yaml
+++ b/vault/kubernetes-roles/openwebui.yaml
@@ -0,0 +1,6 @@
+bound_service_account_names:
+  - openwebui-secret
+bound_service_account_namespaces:
+  - openwebui
+token_policies:
+  - openwebui
--- a/vault/policy/openwebui.hcl
+++ b/vault/policy/openwebui.hcl
@@ -0,0 +1,3 @@
+path "secret/data/authentik/openwebui" {
+    capabilities = ["read"]
+}