Kevin Veen-Birkenbach 75c36a1d71 web-app-minio: manage OIDC policy via containerized mc and fix policy JSON ...

- Use dockerized mc with MC_HOST_minio (stateless), no temp files/dirs
- Create only RAW policy name with slash to match Keycloak claim
- Split policy: s3:* on S3 ARNs; admin:* on Resource "*"
- Add mc vars (image, MC_HOST components) to vars/main.yml
- Remove unused Ollama dependency block from tasks

Refs: ChatGPT conversation → https://chatgpt.com/share/68d1eab9-a35c-800f-aa81-76fb2101bd93

2025-09-23 02:33:35 +02:00

..

docker-compose.yml.j2

feat(ai): introduce dedicated AI roles and wiring; clean up legacy AI stack

2025-09-22 18:40:20 +02:00

env.j2

web-app-minio: enable OIDC integration and policy handling

2025-09-23 00:56:11 +02:00

policy.json.j2

web-app-minio: manage OIDC policy via containerized mc and fix policy JSON

2025-09-23 02:33:35 +02:00