tegwick
145ca8e08c
Some checks failed
Custody gains LLDAP_SVC_{AUTHELIA,KEYCAPE,PRIVACYIDEA,PROVISIONER}_PASS and
LLDAP_LDAP_USER_PASS becomes ld-admin's. Authelia, KeyCape, the privacyIDEA
resolver and identity-provisioner (new Secret identity-provisioner-ldap) switch
to svc-* accounts; LLDAP's configured super-admin is ld-admin. The LLDAP image
pin waits for the running digest.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 308701@bnt-lap001
Assistant-Session: 5548e447-444c-4dcc-bed1-05c16eebfe56
7 lines
273 B
Bash
7 lines
273 B
Bash
#!/usr/bin/env bash
|
|
# Private creation or exact-match verification; rotations require --rotate-key.
|
|
set +x
|
|
set -euo pipefail
|
|
umask 077
|
|
SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
|
|
exec python3 "$SCRIPT_DIR/../../bootstrap/apply-service-secrets.py" identity-provisioner "$@"
|