Files
computer-playbook/roles/web-app-flowise/meta/users.yml
kevinveenbirkenbachandClaude Opus 5 6d8a741581 feat(users): let a user declare how its password must be generated
A user password is pinned once by inventory creation from a shell-safe
alphabet, because it travels through Ansible, a shell and container exec.
An application whose registration demands a special character then had no
way to say so, and roles worked around it with a second credential beside
the account they already owned. The account now carries algorithm and
validation itself, two roles disagreeing about one account abort instead of
one silently winning, and an unsatisfiable pair fails naming both halves.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
2026-08-12 15:10:15 +02:00

11 lines
281 B
YAML

---
flowise-api-bot:
username: flowise-api-bot
firstname: Infinito
lastname: API Bot
accounts: []
password:
algorithm: strong_password
validation: "[^A-Za-z0-9]"
description: API-only identity used to reconcile the custom MCP server registry (NOT an OIDC user)