Description
Currently, secret-sync creates a fixed set of bridgehead groups in Authentik. These groups are always the same, regardless of the specific needs of a particular bridgehead.
Problem
This approach leads to:
- The creation of unnecessary groups in Authentik.
- A lack of flexibility for bridgeheads that require a custom group setup.
Proposed Solution
Change the behavior so that the local secret-sync instance running in each bridgehead determines which groups should be created in Authentik based on the selected modules. This information should be sent to the central secret-sync, which then ensures that only those specified groups are created and maintained.
Benefits
- More flexibility for local configurations.
- Cleaner Authentik setup with only the necessary groups.
- Improved maintainability by avoiding unused or irrelevant groups.