Merge remote-tracking branch 'origin/main' into benvin/repospawner-oidc

# Conflicts: # config/roles/akR-global-admin.yaml
2026-08-31 22:07:36 +10:00
parent 2f80c4a536 6d014ce913
commit 3977f6f86b
7 changed files with 114 additions and 4 deletions
@@ -0,0 +1,5 @@
+# Permission group akP-vault-admin (name = filename). Gates the OpenBao
+# application: without a binding every Authentik user could complete an OIDC
+# login, so access is restricted to this group. OpenBao's own policy mapping
+# keys off the same group name in the ak_groups claim.
+application: vault