key-cape/workplans/ADHOC-2026-08-23.md
tegwick f5cf77fa0c
All checks were successful
Build and Publish Container Image / build-and-push (push) Successful in 23s
Admit operator-tunneled OpenBao callback
Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a02e3f-7301-7622-9be1-12e5f352881c
2026-08-23 13:16:21 +02:00

29 lines
797 B
Markdown

---
id: ADHOC-2026-08-23
type: workplan
title: "Ad hoc KeyCape maintenance — 2026-08-23"
domain: infotech
repo: key-cape
status: finished
owner: codex
topic_slug: netkingdom
created: "2026-08-23"
updated: "2026-08-23"
---
# Ad hoc KeyCape maintenance — 2026-08-23
## Admit the operator-tunneled OpenBao callback
```task
id: ADHOC-2026-08-23-T01
status: done
priority: high
```
Added the exact operator-only callback
`http://127.0.0.1:18200/ui/vault/auth/netkingdom/oidc/callback` to the
source-owned `openbao-admin` static client in `config/dev-config.yaml`. The
registration retains exact-match redirects and does not authorize a login,
change the OpenBao role, broaden a listener, or handle a credential. A config
test pins the exact URI and proves the complete source config validates.