vinzenz/hyperhive
vinzenz/hyperhive
Watch
0
0
Fork
You've already forked hyperhive
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 2

swarm-bao: enable approle auth method in bootstrap

Browse source 
Adds approle to the auth methods enabled during swarm-bao bootstrap,
using the same idempotent check pattern as cert. No role or policy
is configured yet — those are handled in later slices.

Refs #4386
This commit is contained in:
atlas 2026-09-15 21:45:25 +02:00
commit c406ffb0f9
1 changed files with 5 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

5
nix/host-modules/swarm-bao.nix
View file

@ -1034,6 +1034,11 @@ in
*) bao auth enable cert ;; *) bao auth enable cert ;;
esac esac
case "$mounted" in
*'"approle/"'*) ;;
*) bao auth enable approle ;;
esac
# `certificate=` is the CA, so this role trusts every leaf that # `certificate=` is the CA, so this role trusts every leaf that
# CA signed and `allowed_common_names` is the whole narrowing — # CA signed and `allowed_common_names` is the whole narrowing —
# which is why ./swarm.nix reserves this subject as a hive name, # which is why ./swarm.nix reserves this subject as a hive name,