railiance-platform/openbao/auth/netkingdom-platform-admin-role.json
codex bcf6f9bf12
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
Prune retired bao.coulomb.social callbacks from platform-admin; declare OIDC mount config
Attended run 2026-09-23T23:11Z: status pruned, tunnel callback kept, all
other role settings preserved and verified on readback. Declarations now
match live; railiance-platform owns the mount config.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 150322@bnt-lap001
Assistant-Session: 16a7b788-374e-4915-a1df-fc87ffd9a5e4
2026-09-24 01:14:43 +02:00

45 lines
946 B
JSON

{
"allowed_redirect_uris": [
"http://localhost:8250/oidc/callback",
"http://127.0.0.1:8250/oidc/callback",
"http://127.0.0.1:18200/ui/vault/auth/netkingdom/oidc/callback"
],
"bound_audiences": [],
"bound_claims": {
"groups": [
"net-kingdom-admins"
]
},
"bound_claims_type": "string",
"bound_subject": "",
"claim_mappings": {
"email": "email",
"preferred_username": "username"
},
"groups_claim": "groups",
"oidc_scopes": [
"openid",
"profile",
"email",
"groups"
],
"policies": [
"platform-admin",
"operator-custody"
],
"role_type": "oidc",
"token_bound_cidrs": [],
"token_explicit_max_ttl": 0,
"token_max_ttl": 0,
"token_no_default_policy": false,
"token_num_uses": 0,
"token_period": 0,
"token_policies": [
"platform-admin",
"operator-custody"
],
"token_ttl": 3600,
"token_type": "default",
"ttl": 3600,
"user_claim": "sub"
}