rock 8f7004c946 iam: switch service accounts to roles-based auth ...

- Roles stored in user attributes, not groups
- Property mapping looks up roles by client_id for client_credentials
- Service account apps have no policy bindings (client_secret = access control)
- Cleanup stale bindings on re-provision
- JWT claims: azp (service identity) + roles (capabilities)

2026-09-03 19:23:06 -07:00

..

iam

iam: switch service accounts to roles-based auth

2026-09-03 19:23:06 -07:00

device-flow-demo.sh

chore: retire TemporalWorker CRD — agent-harness-worker and Forgejo build workflow removed

2026-08-20 23:10:06 -07:00