Files
computer-playbook/roles/web-app-openbao/meta/users.yml
evangelostsak 0053b07f2c fix(web-app-openbao): drop the dedicated RBAC tier accounts
baooperator and baoreader existed only to hold one RBAC group each, and a
role-declared account has no stable password until the inventory pins one, so
they needed a workaround to be logged in as at all. Moving biber through the
groups covers the same three tiers with an account whose password was never
broken, and additionally proves the grant and the revoke rather than a steady
state.
2026-09-12 00:17:07 +02:00

3 lines
22 B
YAML