Bernd Worsch 35fa3a5767 fix(privacyidea): create pi-admin-all-rights policy in bootstrap-admin.sh ...

Once any admin policy exists, PI enforces it for all admins. Without an
explicit policy, pi-admin is locked out of the REST API after trigger-admin-rights
is created. Add pi-admin-all-rights (scope=admin, action=*) via pi-manage
(in-pod) as step 5, before the REST-based trigger-admin-rights step.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-03-25 11:49:26 +00:00

..

bootstrap

fix(creds-bootstrap): harden agent bootstrap for non-interactive execution

2026-03-21 12:11:13 +00:00

k8s

fix(privacyidea): create pi-admin-all-rights policy in bootstrap-admin.sh

2026-03-25 11:49:26 +00:00

WORKPLAN.md

docs(sso-mfa): record T04 blocker — wrong image reference (ImagePullBackOff)

2026-03-20 17:16:35 +00:00