feat: Add Portainer OAuth2 + enable RBAC policy bindings

- Add app-portainer.tf: OAuth2 provider for Portainer container management
- Add portainer_url variable
- Enable RBAC policy bindings for Grafana, ArgoCD, Home Assistant
- Portainer bound to Infrastructure group policy

RBAC Summary:
- Infrastructure group → Grafana, ArgoCD, Portainer
- Home Automation group → Home Assistant
- Media group → arr stack (existing in app-proxy-arr-stack.tf)
This commit is contained in:
Greg Hendrickson
2026-02-05 16:03:40 +00:00
parent 61ab2ec70c
commit d55a52a8d5
4 changed files with 88 additions and 13 deletions

View File

@@ -18,6 +18,7 @@ uptime_kuma_url = "https://status.example.com"
sonarr_url = "https://sonarr.example.com"
radarr_url = "https://radarr.example.com"
prowlarr_url = "https://prowlarr.example.com"
portainer_url = "https://portainer.example.com"
# LDAP Configuration
ldap_base_dn = "dc=ldap,dc=example,dc=com"