railiance-platform/openbao/auth
codex 6f77484785
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
RPF-WP-0054-T05: fix issuer binding after the first probe
CCR-2026-0043 applied cleanly, but generate could not mint the grant token
(OpenBao refuses child tokens from a limited-use token; the role had
token_num_uses 8) and revoke-self was denied (missing from the issuer
policy). The role now uses 0, which the validator requires, and the issuer
policy grants revoke-self. Nothing was written by the probe.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 469992@bnt-lap001
Assistant-Session: e4b8e420-df0a-441d-83ae-7f19130594d9
2026-10-10 11:12:19 +02:00
..
coding-agent-approle.json
coding-agent-jwt-role.json Prepare tenant-zero OpenBao roles and review platform essentials 2026-09-27 16:43:32 +02:00
credential-broker-keycape-client-secret-generate-oidc-role.json RPF-WP-0054-T05: fix issuer binding after the first probe 2026-10-10 11:12:19 +02:00
external-secrets-keycape-secrets-engine-openbao.draft.json Implement issuer reader preparation and qualify blocked owner dependencies 2026-10-04 11:32:13 +02:00
fluid-telegram-hall-of-helix-oidc-role.json RPF-WP-0035-T03: fluid-telegram operator matrix lane and custody helpers 2026-10-09 12:10:21 +02:00
informed-decision-sitting-requester-eso.draft.json Prepare informed-decision workload reader and contained metadata child 2026-10-04 08:59:02 +02:00
keycape-oidc-config.json Prune retired bao.coulomb.social callbacks from platform-admin; declare OIDC mount config 2026-09-24 01:14:43 +02:00
keycape-services-config.json Prepare tenant-zero OpenBao roles and review platform essentials 2026-09-27 16:43:32 +02:00
netkingdom-oidc-config.json Prune retired bao.coulomb.social callbacks from platform-admin; declare OIDC mount config 2026-09-24 01:14:43 +02:00
netkingdom-platform-admin-role.json Prune retired bao.coulomb.social callbacks from platform-admin; declare OIDC mount config 2026-09-24 01:14:43 +02:00
secrets-engine-jwt-role.json Prepare tenant-zero OpenBao roles and review platform essentials 2026-09-27 16:43:32 +02:00