Enhance Authentik role in noble cluster setup by adding support for resolving OAuth2 flow, signing key, and scope mapping UUIDs from the worker database, improving API access under 2026+ RBAC. Update README with troubleshooting steps for common OAuth2 provider issues and adjust default variables for better configuration management. Ensure seamless integration with oauth2-proxy by allowing unverified email handling in development environments.

ansible/roles/noble_authentik/files/resolve_noble_group_pks.py

@@ -0,0 +1,15 @@
+# Run inside the Authentik worker image (see noble_authentik Ansible role).
+# Ensures **noble-admins** and **noble-editors** exist, then prints their UUIDs (one per line).
+# Order: noble-admins, noble-editors — matches **configure_authentik.py** usage.
+from authentik.core.models import Group
+
+_NAMES = ("noble-admins", "noble-editors")
+
+
+def main() -> None:
+    for name in _NAMES:
+        g, _ = Group.objects.get_or_create(name=name, defaults={"is_superuser": False})
+        print(str(g.pk))
+
+
+main()