Merge pull request #576 from shinbunbun/fix/terraform-entitlements-scope

Terraform: Authentik 2026.2.1のentitlementsスコープを追加

Author: shinbunbun

terraform/authentik_data.tf

@@ -23,6 +23,10 @@ data "authentik_property_mapping_provider_scope" "proxy" {
   managed = "goauthentik.io/providers/proxy/scope-proxy"
 }
 
+data "authentik_property_mapping_provider_scope" "entitlements" {
+  managed = "goauthentik.io/providers/oauth2/scope-entitlements"
+}
+
 # --- デフォルト署名証明書 ---
 data "authentik_certificate_key_pair" "default" {
   name = "authentik Self-signed Certificate"

terraform/authentik_providers.tf

@@ -227,12 +227,13 @@ resource "authentik_provider_proxy" "wg_lease" {
     data.authentik_property_mapping_provider_scope.email.id,
     data.authentik_property_mapping_provider_scope.profile.id,
     data.authentik_property_mapping_provider_scope.proxy.id,
+    data.authentik_property_mapping_provider_scope.entitlements.id,
   ]
   access_token_validity        = "hours=24"
   refresh_token_validity       = "days=30"
   internal_host_ssl_validation = true
   intercept_header_auth        = true
-  jwks_sources = [
-    authentik_source_oauth.github_actions_oidc.id,
+  jwt_federation_sources = [
+    authentik_source_oauth.github_actions_oidc.uuid,
   ]
 }