# Run inside the Authentik worker image (see noble_authentik Ansible role).
# Ensures **noble-admins** and **noble-editors** exist, then prints their UUIDs (one per line).
# Order: noble-admins, noble-editors — matches **configure_authentik.py** usage.
from authentik.core.models import Group

_NAMES = ("noble-admins", "noble-editors")


def main() -> None:
    for name in _NAMES:
        g, _ = Group.objects.get_or_create(name=name, defaults={"is_superuser": False})
        print(str(g.pk))


main()