Files
computer-playbook/roles/web-app-erpnext/meta/users.yml
kevinveenbirkenbachandClaude Fable 5 8ebc912d7a fix(users): opt service bots out of identity provisioning
Keycloak's realm import enforces the ^[a-z0-9]+$ username pattern, so
the LDAP-disabled seeding path (Ensure non-reserved users exist) died
on every hyphenated bot: "Username is reserved or contains invalid
characters". These are API/basic-auth accounts that never need an SSO
identity; accounts: [] takes them out of the seeding loop (semaphore's
breakglass-administrator convention), and no-reply keeps only its
mailbox account.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-07-08 02:37:27 +02:00

9 lines
211 B
YAML

---
administrator: {}
erpnext-api-bot:
username: erpnext-api-bot
firstname: Infinito
lastname: API Bot
accounts: []
description: API-only Basic-auth bot used by the Playwright suite (NOT an OIDC user)