coulomb/railiance-platform
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(RAILIANCE-WP-0027): add contained callback role update
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details

Browse source 
Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a02b90-83bf-75c2-81c8-aa705414e4d4
This commit is contained in:
codex 2026-08-23 14:37:01 +02:00
parent c89187c064
commit d18649fc6e
4 changed files with 164 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

16
docs/openbao-public-listener-transition.md
View file

@ -29,6 +29,22 @@ http://127.0.0.1:18200/ui/vault/auth/netkingdom/oidc/callback
Record only a value-safe attended-login result. Do not record the authorization
code, token, accessor, callback query, browser storage, or screenshots.
KeyCape admission is applied by the Net Kingdom owner procedure. Apply the
OpenBao half through the governed contained login lane; the child command is
silent and Warden self-revokes the attended session:
```bash
warden plan \
"attended OpenBao platform administration to add the exact operator-tunneled OIDC callback to auth/netkingdom/role/platform-admin" \
--json
warden access openbao-platform-admin-login --exec -- \
scripts/openbao-apply-operator-loopback-callback.sh
```
The plan must return `founder_required` and select
`openbao-platform-admin-login`. Do not run the owner command directly with a
persistent token.
## Guarded sequence
```bash