2dad204428
encapi v0.2.0 authenticates writes with Vault identity OIDC tokens; it must validate the issuer, which is served with the internal Vault CA. - bump encapi image to v0.2.0 - set ENCAPI_OIDC_ISSUER to the Vault identity OIDC issuer - trust the Vault CA via a combined bundle and SSL_CERT_FILE, matching artifactapi Reviewed-on: #567 Co-authored-by: unkin-agent <unkin-agent@unkin.net> Co-committed-by: unkin-agent <unkin-agent@unkin.net>