From 483b955f15f0ccee4d8aa12aa92c3c348fb5c048 Mon Sep 17 00:00:00 2001 From: codex Date: Wed, 7 Oct 2026 13:57:42 +0200 Subject: [PATCH] Propose removing the retired bao.coulomb.social callback from CCR-2026-0004/0019/0034 bao.coulomb.social was retired on 2026-09-15. Each OIDC role keeps only the loopback CLI callbacks. Needs founder approval before the re-apply. Co-Authored-By: Claude Opus 5.5 Assistant: claude-code Assistant-Model: opus Assistant-Process: 132360@bnt-lap001 Assistant-Session: 769b1afd-4330-4c86-96b2-e510e26db42b --- .../CCR-2026-0004-railiance-backup-offsite-lane.yaml | 1 - .../CCR-2026-0019-secrets-engine-approval-client-read.yaml | 1 - credential-change-requests/CCR-2026-0034.yaml | 1 - 3 files changed, 3 deletions(-) diff --git a/credential-change-requests/CCR-2026-0004-railiance-backup-offsite-lane.yaml b/credential-change-requests/CCR-2026-0004-railiance-backup-offsite-lane.yaml index 69ca933..17c6e77 100644 --- a/credential-change-requests/CCR-2026-0004-railiance-backup-offsite-lane.yaml +++ b/credential-change-requests/CCR-2026-0004-railiance-backup-offsite-lane.yaml @@ -40,7 +40,6 @@ openbao: mount: netkingdom role: railiance-backup-workload-kv-read allowed_redirect_uris: - - https://bao.coulomb.social/ui/vault/auth/netkingdom/oidc/callback - http://localhost:8250/oidc/callback - http://127.0.0.1:8250/oidc/callback oidc_scopes: diff --git a/credential-change-requests/CCR-2026-0019-secrets-engine-approval-client-read.yaml b/credential-change-requests/CCR-2026-0019-secrets-engine-approval-client-read.yaml index 64b2ec8..51ab81f 100644 --- a/credential-change-requests/CCR-2026-0019-secrets-engine-approval-client-read.yaml +++ b/credential-change-requests/CCR-2026-0019-secrets-engine-approval-client-read.yaml @@ -75,7 +75,6 @@ openbao: mount: netkingdom role: secrets-engine-approval-client-workload-kv-read allowed_redirect_uris: - - https://bao.coulomb.social/ui/vault/auth/netkingdom/oidc/callback - http://localhost:8250/oidc/callback - http://127.0.0.1:8250/oidc/callback oidc_scopes: diff --git a/credential-change-requests/CCR-2026-0034.yaml b/credential-change-requests/CCR-2026-0034.yaml index 5d3e89c..30c2d8f 100644 --- a/credential-change-requests/CCR-2026-0034.yaml +++ b/credential-change-requests/CCR-2026-0034.yaml @@ -72,7 +72,6 @@ openbao: mount: netkingdom role: keycape-secrets-engine-openbao-operator-workload-kv-read allowed_redirect_uris: - - https://bao.coulomb.social/ui/vault/auth/netkingdom/oidc/callback - http://localhost:8250/oidc/callback - http://127.0.0.1:8250/oidc/callback oidc_scopes: