# Noble — directory groups for the **public** hostname Brand (see role README).
# Groups are global to the instance; use policies and OAuth scope mappings to scope claims per app.
version: 1
metadata:
  name: noble-public-groups
  labels:
    blueprints.goauthentik.io/instantiate: "true"
entries:
{% for group in noble_authentik_blueprint_public_groups | default([]) %}
  - model: authentik_core.group
    identifiers:
      name: "{{ group | trim }}"
{% endfor %}