apiVersion: authelia.huizinga.dev/v1
kind: AccessControlRule
metadata:
  name: ceph
spec:
  domain: ceph.${domain}
  policy: one_factor
  subject: "group:lldap_admin"