 evangelostsak
|
793b32f742
|
style(web-app-openbao): drop the narrative comment from the reader policy
|
2026-09-11 18:37:14 +02:00 |
|
|
evangelostsak
|
2f1db60f14
|
style(web-app-openbao): drop the narrative comment from the operator policy
|
2026-09-11 18:37:09 +02:00 |
|
|
evangelostsak
|
6cd99b402f
|
style(web-app-openbao): drop the narrative comment from the administrator policy
|
2026-09-11 18:37:05 +02:00 |
|
|
evangelostsak
|
241b01f94a
|
style(web-app-openbao): drop the narrative comments from 04_auth_methods.yml
|
2026-09-11 18:37:01 +02:00 |
|
|
evangelostsak
|
47217af7a1
|
style(web-app-openbao): drop the narrative comment from 03_policies.yml
|
2026-09-11 18:36:55 +02:00 |
|
|
evangelostsak
|
cbda5724c8
|
style(web-app-openbao): drop the narrative comments from 01_init.yml
|
2026-09-11 18:36:50 +02:00 |
|
|
evangelostsak
|
71f2a0c414
|
style(web-app-openbao): drop the narrative comment from 00_core.yml
|
2026-09-11 18:36:45 +02:00 |
|
|
evangelostsak
|
4a206f6d52
|
style(web-app-openbao): drop the narrative comment from the group-alias helper
|
2026-09-11 18:36:41 +02:00 |
|
|
evangelostsak
|
c2620a7087
|
style(web-app-openbao): drop the narrative comment from meta/server.yml
|
2026-09-11 18:36:31 +02:00 |
|
|
evangelostsak
|
694ee29f46
|
style(web-app-openbao): drop the narrative comment from the RBAC denial spec
|
2026-09-11 18:36:24 +02:00 |
|
|
evangelostsak
|
2149255aaa
|
style(web-app-openbao): drop the narrative comment from the LDAP spec
|
2026-09-11 18:36:15 +02:00 |
|
|
evangelostsak
|
ce8ad5c97e
|
style(web-app-openbao): drop the narrative comments from the OIDC spec
|
2026-09-11 18:36:10 +02:00 |
|
|
evangelostsak
|
3f6a454a53
|
test(web-app-openbao): aggregate the RBAC tier spec
|
2026-09-11 18:35:40 +02:00 |
|
|
evangelostsak
|
754d8bf140
|
test(web-app-openbao): assert every RBAC tier receives its policy and its capabilities
|
2026-09-11 18:35:36 +02:00 |
|
|
evangelostsak
|
136c28f15d
|
test(web-app-openbao): expose the RBAC account credentials and the KV mount to Playwright
|
2026-09-11 18:35:31 +02:00 |
|
|
evangelostsak
|
8dcfed33c3
|
feat(web-app-openbao): declare dedicated operator and reader RBAC accounts
|
2026-09-11 18:35:27 +02:00 |
|
|
evangelostsak
|
4296fbc487
|
feat(web-app-openbao): move the seal alert into the role that owns the metric
|
2026-09-11 18:35:23 +02:00 |
|
|
evangelostsak
|
8fb0b58e89
|
docs(web-app-openbao): record that the UI logout route leaves the session intact
|
2026-09-08 14:51:55 +02:00 |
|
|
evangelostsak
|
d7fea8fae5
|
docs(web-app-openbao): correct the product name casing in the Cosmos intro
|
2026-09-08 05:46:08 +02:00 |
|
|
evangelostsak
|
b2fb57ef63
|
style(web-app-openbao): apply autoformat to the credential descriptions
|
2026-09-08 05:36:02 +02:00 |
|
|
evangelostsak
|
9d647987c1
|
refactor(web-app-openbao): precompute the PKI issuing and CRL URLs
|
2026-09-07 22:13:49 +02:00 |
|
|
evangelostsak
|
a18f8a24ee
|
fix(web-app-openbao): stop reporting the token cleanup as a configuration change
|
2026-09-07 22:13:42 +02:00 |
|
|
evangelostsak
|
42070a9804
|
fix(web-app-openbao): derive changed state for the PKI reconciliation
|
2026-09-07 22:13:33 +02:00 |
|
|
evangelostsak
|
0d84d04c2f
|
fix(web-app-openbao): derive changed state for the auth method reconciliation
|
2026-09-07 22:13:18 +02:00 |
|
|
evangelostsak
|
8239277fdd
|
fix(web-app-openbao): derive changed state for the policy and KV reconciliation
|
2026-09-07 22:09:28 +02:00 |
|
|
evangelostsak
|
10bdd88867
|
fix(web-app-openbao): give the seal-status requests onion-aware timeouts
|
2026-09-07 08:40:55 +02:00 |
|
|
evangelostsak
|
dbe6dea7c6
|
fix(web-app-openbao): give the RBAC denial requests onion-aware timeouts
|
2026-09-07 08:40:44 +02:00 |
|
|
evangelostsak
|
5b0ae2444f
|
fix(web-app-openbao): give the LDAP login requests onion-aware timeouts
|
2026-09-07 08:40:33 +02:00 |
|
|
evangelostsak
|
18be72ea40
|
fix(web-app-openbao): give the baseline health request an onion-aware timeout
|
2026-09-07 08:40:09 +02:00 |
|
|
evangelostsak
|
f7a187795b
|
docs(web-app-openbao): document the seal model, bootstrap flow and restore procedure
|
2026-09-07 00:39:02 +02:00 |
|
|
evangelostsak
|
302d164112
|
test(web-app-openbao): assert the seal state and health-code contract
|
2026-09-07 00:38:42 +02:00 |
|
|
evangelostsak
|
a48210b8e0
|
test(web-app-openbao): assert privileged paths and metrics are refused publicly
|
2026-09-07 00:38:16 +02:00 |
|
|
evangelostsak
|
a5056a874a
|
test(web-app-openbao): assert LDAP login maps groups to the expected policy
|
2026-09-07 00:38:00 +02:00 |
|
|
evangelostsak
|
930d8a2bc8
|
test(web-app-openbao): assert the Keycloak OIDC login lands authenticated
|
2026-09-07 00:37:37 +02:00 |
|
|
evangelostsak
|
9b84ba7a6d
|
test(web-app-openbao): add administrator persona scenario
|
2026-09-07 00:37:18 +02:00 |
|
|
evangelostsak
|
678cb875c4
|
test(web-app-openbao): add biber persona scenario
|
2026-09-07 00:36:45 +02:00 |
|
|
evangelostsak
|
d7abde007d
|
test(web-app-openbao): add guest persona scenario
|
2026-09-07 00:36:09 +02:00 |
|
|
evangelostsak
|
8fa727a534
|
test(web-app-openbao): assert reachability and an initialised, unsealed node
|
2026-09-07 00:35:48 +02:00 |
|
|
evangelostsak
|
e51e5f8c13
|
feat(web-app-openbao): add Playwright spec aggregator
|
2026-09-07 00:35:24 +02:00 |
|
|
evangelostsak
|
5654ece9e1
|
feat(web-app-openbao): exempt the Playwright tree from the file-layout lint
|
2026-09-07 00:35:06 +02:00 |
|
|
evangelostsak
|
bd81005a87
|
feat(web-app-openbao): add read-only reader policy
|
2026-09-07 00:34:48 +02:00 |
|
|
evangelostsak
|
f5ce342266
|
feat(web-app-openbao): add operator policy without administrative capabilities
|
2026-09-07 00:34:33 +02:00 |
|
|
evangelostsak
|
199fcb894f
|
feat(web-app-openbao): add administrator policy
|
2026-09-07 00:34:12 +02:00 |
|
|
evangelostsak
|
8415090b4c
|
feat(web-app-openbao): add ansible-admin reconciliation policy
|
2026-09-07 00:33:56 +02:00 |
|
|
evangelostsak
|
55785b65cc
|
feat(web-app-openbao): expose the Playwright env contract
|
2026-09-07 00:33:42 +02:00 |
|
|
evangelostsak
|
55b35a9f02
|
feat(web-app-openbao): add native metrics scrape job
|
2026-09-07 00:33:29 +02:00 |
|
|
evangelostsak
|
54ece0aeff
|
fix(web-app-openbao): deny /v1/sys/metrics on the public vhost
|
2026-09-07 00:33:15 +02:00 |
|
|
evangelostsak
|
66e7503f7c
|
feat(web-app-openbao): inject the seal key through the container environment
|
2026-09-07 00:32:57 +02:00 |
|
|
evangelostsak
|
ab19d6eb4d
|
feat(web-app-openbao): add compose service with stop-first update order
|
2026-09-07 00:32:24 +02:00 |
|
|
evangelostsak
|
783d13190b
|
feat(web-app-openbao): add server config with raft storage and static seal
|
2026-09-07 00:32:10 +02:00 |
|