Restructure bootstrap UI around artefact model

This commit is contained in:
2026-05-25 11:49:51 +02:00
parent 07c98b564a
commit 4982c92fb1
3 changed files with 769 additions and 131 deletions

View File

@@ -76,6 +76,22 @@ python3 tools/security-bootstrap-console/security_bootstrap_console.py \
Open `http://127.0.0.1:8765`.
The web UI is structured as:
1. **Roles & Responsibilities** - global bootstrap roles with designated
operator emails.
2. **Subsystems & Scope** - installation and initial access for LLDAP,
privacyIDEA, KeyCape, the custodian age envelope, and Railiance OpenBao.
3. **Integration & Tests** - OIDC and OpenBao preflight checks, with every
operator command shown as a copyable console block.
4. **Artefacts & Locations** - final non-secret overview of established
artefacts and where to find their custody references.
Role, subsystem, integration, and artefact records use the same fields:
`name`, `description`, `subsystem`, `responsibility`, `location`, and `state`.
States are `nil`, `set`, `err`, and `ok`. Role chips expose the designated
email as hover text.
The UI is a guide and approval surface, not the identity provider. Current
lightweight-mode credential placement is: