From 5cd125d93c5ffba57065303caeb84f6518de6d62 Mon Sep 17 00:00:00 2001
From: kisfenyo <nagyfenyvesi.viktor@gmail.com>
Date: Tue, 6 Jan 2026 11:19:59 +0100
Subject: [PATCH] added role retrieving from authentik

---
 mon-system/monitoring.yaml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/mon-system/monitoring.yaml b/mon-system/monitoring.yaml
index 1dc93de..cabcd47 100644
--- a/mon-system/monitoring.yaml
+++ b/mon-system/monitoring.yaml
@@ -485,7 +485,7 @@ spec:
                   name: grafana-oauth
                   key: client-secret
             - name: GF_AUTH_GENERIC_OAUTH_SCOPES
-              value: "openid profile email"
+              value: "openid profile email grafana-admin-role"
             - name: GF_AUTH_GENERIC_OAUTH_AUTH_URL
               value: "https://authentik.dooplex.hu/application/o/authorize/"
             - name: GF_AUTH_GENERIC_OAUTH_TOKEN_URL
@@ -497,7 +497,7 @@ spec:
             - name: GF_AUTH_OAUTH_AUTO_LOGIN
               value: "true"
             - name: GF_AUTH_GENERIC_OAUTH_ROLE_ATTRIBUTE_PATH
-              value: "contains(groups[*], 'Grafana Admins') && 'Admin' || 'Viewer'"
+              value: "role"
           livenessProbe:
             httpGet:
               path: /api/health