Map WIF runner client from audience
This commit is contained in:
parent
5276b57c4d
commit
65809da33a
3 changed files with 3 additions and 3 deletions
|
|
@ -18,7 +18,7 @@ It may manage:
|
|||
signatures (`sparkle-ed25519`)
|
||||
- an Authentik-backed WIF pool/provider for Forgejo runners
|
||||
- the runner service account and its narrow IAM binding for the Authentik WIF
|
||||
client ID `google-wif.burrow.net`; human/group grants are opt-in
|
||||
audience/client value `google-wif.burrow.net`; human/group grants are opt-in
|
||||
|
||||
It must not manage:
|
||||
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue