unkin/terraform-vault
3
0
Fork 0
Code Issues 2 Pull Requests Actions Packages Projects Releases Wiki Activity

Grant the vault deployer auth/oidc and identity group capabilities #148

Merged
benvin merged 1 commits from benvin/oidc-deployer-grants into master 2026-08-30 22:14:43 +10:00
Conversation 0 Commits 1 Files Changed 2
+57

1 Commits

Author SHA1 Message Date
unkin-agent 7d13c0442b Grant the vault deployer auth/oidc and identity group management
ci/woodpecker/pr/plan Pipeline was successful
Details
ci/woodpecker/pr/pre-commit Pipeline was successful
Details 
The auth/oidc modules in benvin/auth-oidc write auth/oidc/config,
auth/oidc/role/* and external identity groups/aliases. AppRole capabilities
are fixed at login, so the deployer must already hold these grants when that
apply runs.

Add policies/auth/oidc/admin.yaml and policies/identity/group/admin.yaml,
split out of #147 per the never-bundle rule.
 2026-08-30 21:59:25 +10:00