Core
If Grafana is configured with Keycloak OAuth, clicking it should not ask for a separate password once you're logged in here.
Infrastructure
Traefik dashboard is currently exposed with TLS on its own hostname. We can protect it via Keycloak (oauth2-proxy) next.