test(mealie): exercise GitOps access grant #181

Merged

morten-olsen merged 1 commit from test/homeit-474-mealie-membership into main

2026-10-29 23:15:13 +01:00

morten-olsen commented

2026-10-29 23:13:34 +01:00

Owner

Validation: published dependency and Mealie chart lint/render/kubeconform/claim tests pass. Initial live enforcement proved native akadmin denial and fresh morten authorization-code issuance. Merge after green CI, verify akadmin authorization after this Git grant, then revoke it through a separate Git commit and verify denial. No user/password/email-trust change or application session creation is included; other applications remain unchanged.

Temporarily grant existing akadmin (ID 6, pinned UUID) only the Mealie application group, to execute HOMEIT-474's approved canary membership acceptance. Shared/admin and all Authentik/application administrator privileges remain unchanged. This implements the grant/removal exercise covered by Security HOMEIT-481 and Morten's instruction to roll out the canary. Validation: published dependency and Mealie chart lint/render/kubeconform/claim tests pass. Initial live enforcement proved native akadmin denial and fresh morten authorization-code issuance. Merge after green CI, verify akadmin authorization after this Git grant, then revoke it through a separate Git commit and verify denial. No user/password/email-trust change or application session creation is included; other applications remain unchanged.

morten-olsen added 1 commit

2026-10-29 23:13:34 +01:00