feat: admin perms for grafana

[bo0tzz]

No description provided.

[github-actions]

--- kubernetes/apps/monitoring/grafana/app Kustomization: flux-system/grafana Grafana: monitoring/grafana

+++ kubernetes/apps/monitoring/grafana/app Kustomization: flux-system/grafana Grafana: monitoring/grafana

@@ -9,17 +9,21 @@

     kustomize.toolkit.fluxcd.io/namespace: flux-system
   name: grafana
   namespace: monitoring
 spec:
   config:
     auth.generic_oauth:
+      allow_assign_grafana_admin: 'true'
       api_url: https://auth.immich.cloud/userinfo
       auth_url: https://auth.immich.cloud/auth
+      auto_login: 'true'
       client_id: grafana
       client_secret: ${GRAFANA_OAUTH_CLIENT_SECRET}
       enabled: 'true'
+      role_attribute_path: contains(groups[*], 'immich-app:Admins') && 'GrafanaAdmin'
+        || 'Viewer'
       scopes: openid email profile groups offline_access
       token_url: https://auth.immich.cloud/token
     server:
       root_url: https://monitoring.immich.cloud/
   deployment:
     spec: