Record whynot OpenBao lane apply evidence

2026-06-28 12:41:39 +02:00
parent 3ef25cb787
commit 271aa94642
8 changed files with 134 additions and 12 deletions
--- a/schemas/credential-change-request.schema.yaml
+++ b/schemas/credential-change-request.schema.yaml
@@ -81,6 +81,11 @@ workload_kv_read:
      - deactivate
      - rotate
      - compromised
+  conditional:
+    openbao.auth.method=oidc:
+      required:
+        - allowed_redirect_uris
+      allowed_redirect_uris: non-empty list of OpenBao callback URIs accepted by the role

 access_frontdoor_readiness:
  allowed: