apiVersion: v1
kind: Secret
metadata:
  name: authelia-acl
stringData:
  rules: |
    - domain: traefik.${domain}
      policy: one_factor
      subject: "group:lldap_admin"
    - domain: ceph.${domain}
      policy: one_factor
      subject: "group:lldap_admin"
    - domain: grafana.${domain}
      policy: one_factor