Map WIF runner client from audience
Some checks failed
Build Rust / Cargo Test (push) Successful in 4m1s
Infra: OpenTofu / OpenTofu (grafana) (push) Successful in 4s
Build Site / Next.js Build (push) Failing after 5s
Lint Governance / BEP Metadata (push) Successful in 1s

This commit is contained in:
Conrad Kramer 2026-06-07 14:15:59 -07:00
parent 5276b57c4d
commit 65809da33a
3 changed files with 3 additions and 3 deletions

View file

@ -18,7 +18,7 @@ It may manage:
signatures (`sparkle-ed25519`)
- an Authentik-backed WIF pool/provider for Forgejo runners
- the runner service account and its narrow IAM binding for the Authentik WIF
client ID `google-wif.burrow.net`; human/group grants are opt-in
audience/client value `google-wif.burrow.net`; human/group grants are opt-in
It must not manage: