AuthentikGroup
Mirrors authentik_group.
- API version:
authentik.weebo.io/v1alpha1 - Scope: Cluster
- Short names: none
- Guide: First application walkthrough
Mirrors authentik_group. Cluster-scoped — group hierarchy is an
org-wide identity concept, not owned by a namespace. Only reachable via
cluster-scoped RBAC (no AuthentikNamespacePolicy governs this kind).
Example
apiVersion: authentik.weebo.io/v1alpha1
kind: AuthentikGroup
metadata:
name: my-group
spec:
name: weebo_user
parentRef: weebo_baseSpec fields
| Field | Type | Required | Default | Description |
|---|---|---|---|---|
attributes | object | no | {} | |
isSuperuser | boolean | no | false | |
name | string | yes | ||
parentRef | string | no | Parent group, for hierarchy (weebo_user -> weebo_moderator -> weebo_admin in the Terraform module). This is the parent's Authentik name — its spec.name, the value Authentik itself stores — not the name of the AuthentikGroup CR describing it. It is resolved with a /core/groups/?name= query against the instance, and no Kubernetes object is read: a CR named weebo-user whose spec.name is weebo_user must be referenced here as weebo_user. A miss fails the reconcile with GroupRefNotFound, it never creates the parent. |
Build a manifest
Answer the questions and fill in the fields: the YAML preview updates as you type, ready to copy or download and kubectl apply.
Loading form...