Bernd Worsch 35fa3a5767 fix(privacyidea): create pi-admin-all-rights policy in bootstrap-admin.sh ... Once any admin policy exists, PI enforces it for all admins. Without an explicit policy, pi-admin is locked out of the REST API after trigger-admin-rights is created. Add pi-admin-all-rights (scope=admin, action=*) via pi-manage (in-pod) as step 5, before the REST-based trigger-admin-rights step. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>		2026-03-25 11:49:26 +00:00
..
bootstrap	fix(creds-bootstrap): harden agent bootstrap for non-interactive execution	2026-03-21 12:11:13 +00:00
k8s	fix(privacyidea): create pi-admin-all-rights policy in bootstrap-admin.sh	2026-03-25 11:49:26 +00:00
WORKPLAN.md	docs(sso-mfa): record T04 blocker — wrong image reference (ImagePullBackOff)	2026-03-20 17:16:35 +00:00