Restrict Grafana access to Arch Linux Staff group on Keycloak (fixes #151) (!171) · Merge requests · Arch Linux / infrastructure · GitLab

Due to an influx of spam, we have had to temporarily disable account registrations. Please write an email to accountsupport@archlinux.org, with your desired username, if you want to get access. Sorry for the inconvenience.

Sven-Hendrik Haase requested to merge restrict-grafana-access into master Dec 10, 2020

This is already applied and appears to be working. A reviewer at the very least needs to check that:

Grafana access is possible if you are in the Arch Linux Staff group on Keycloak.
Grafana access is not possible if you are not.
Ideally, check that for other OIDC applications, things are unchanged. Sadly, we don't really have other OIDC applications at the time of writing so I'm not sure how to treat this.

Edited Dec 11, 2020 by Jelle van der Waa