unkin-agent
2f80c4a536
Add an OAuth2/OIDC provider + application for the repospawner operator tool, fronted by oauth2-proxy, and gate it on a new akP-repospawner-admin permission group nested under akR-global-admin (mirrors the watchstate precedent).
4 lines
176 B
YAML
4 lines
176 B
YAML
# Permission group akP-repospawner-admin (name = filename). Grants admin
|
|
# access to repospawner: bound to the repospawner application, gating the UI.
|
|
application: repospawner
|