From 59ad8e98e578038e59fb1b639ddfedb8cef2f679 Mon Sep 17 00:00:00 2001
From: Zack <zack@futo.org>
Date: Thu, 23 Jul 2026 14:10:00 +0100
Subject: [PATCH] feat: grant futo the viewer role on grafana o11y

---
 tf/deployment/modules/shared/zitadel/cloud/project.tf | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tf/deployment/modules/shared/zitadel/cloud/project.tf b/tf/deployment/modules/shared/zitadel/cloud/project.tf
index a91c79de5..89af01d49 100644
--- a/tf/deployment/modules/shared/zitadel/cloud/project.tf
+++ b/tf/deployment/modules/shared/zitadel/cloud/project.tf
@@ -32,7 +32,7 @@ locals {
       # redirectUris intentionally empty for now — add the o11y grafana host
       # (https://<host>/login/generic_oauth) once it's finalised
       redirectUris = ["https://grafana.futostatus.com/login/generic_oauth", "https://grafana.staging.futostatus.com/login/generic_oauth"]
-      roles        = [{ key = "GrafanaAdmin", grants_to = ["immich_admin"] }, { key = "Editor", grants_to = ["team", "yucca"] }]
+      roles        = [{ key = "GrafanaAdmin", grants_to = ["immich_admin"] }, { key = "Editor", grants_to = ["team", "yucca"] }, { key = "Viewer", grants_to = ["futo"] }]
     },
     {
       name = "Outline"