docs(identity): 0pt workload identity — målbild, design och blockerare #502
Open
admin
wants to merge 1 commits from
docs/workload-identity-20261107 into main
pull from: docs/workload-identity-20261107
merge into: :main
:main
:fix/prod-restore-2026-09-29
:docs/workload-identity-20261107
:fix/canonical-migration-idempotent-20261107
:fix/internal-token-tenant-20261107
:feat/capability-descriptor-completion-20261107
:feat/canonical-internal-token
:fix/canonical-migration-number
:fix/source-bundle-20261104
:fix/prod-evidence-2026-09-29
:docs/deploy-runbook
:fix/keycloak-portal-trust-20261102
:fix/smoke-main-sha
:chore/optimize-pipelines
:chore/remove-stale-package-lock-20261101
:fix/trivy-skip-sbom-evidence-20261101
:fix/doctor-fixture-v3-20261101
:fix/next-16.4.1-20261031
:wip/asus-20261005/Documents_0pt-9cad5f9
:feat/import-dispatch-policy
:opt-vehiq-work-salvage-20260927/0pt-p060-p068_0pt-uncommitted-wip
:fix-chore/normalize-sax3l-ci-refs-20260925
:salvage/20260925/siax-arkiv/siax-work/0pt-feature/0pt-remove-noncompliant-scrapers
:salvage/20260925/siax-arkiv/siax-platforms-work/0pt-feat/p014-data-os-hardening
:salvage/20260925/siax-arkiv/siax-work/0pt-oai/devos-band29-0pt
:salvage/20260925/siax-arkiv/siax-work/0pt-stash-stash0
:feat/golden-standard-scaffold
:docs/coolify-deploy-hook-is-live-opus5
:docs/bi-canonical-stack-correction-opus5
:feat/p060-p068-ingestion-plane
:chore/siax-repo-v3-manifest
:feat/p014-data-os-hardening
:feat/p010-data-os-completion
:feat/siax-platforms-p0-data-os
:fix/coolify-app-id
:docs/repo-hygiene-v2-standard
:fix/honest-health-check
:docs/compliance-blockers-2026-08-11
:security/auth-gate-anonymous-api-routes
:fix/remove-vercel-deploy-target
:unify/github-main-2026-07-28
:docs/1p-egress-measurement-point
:foundation/hardening
1
Commits
| Author | SHA1 | Message | Date | |
|---|---|---|---|---|
|
|
8741169259 |
docs(identity): 0pt workload identity — målbild, integrationsdesign och blockerare
masterplan-lock / check (push) Successful in 4s
CI (SIAX Cloud) / sonar (pull_request) Skipped
masterplan-lock / check (pull_request) Successful in 4s
CI (SIAX Cloud) / Component conformance (blocking) (pull_request) Successful in 9s
CI (SIAX Cloud) / security (pull_request) Successful in 20s
Security Scan (SIAX Cloud) / security (pull_request) Successful in 22s
CI (SIAX Cloud) / integration (pull_request) Successful in 30s
CI (SIAX Cloud) / quality (pull_request) Successful in 10m9s
Nuläge (delad INTERNAL_TOKEN + serverkonfigurerad tenant-allowlist) mot CL0UD:s redan existerande service-account/workload-token-maskineri (aud:0pt, 10 min, capabilities). Design: verifiering före route-logik, tenant från claim, capability per route, dual-accept under övergång, negativa tester i samma svit. Provisionering är blockerad: /account/service-accounts kräver operator-session (307 -> /login) och Zitadel admin-PAT är invalid (AUTH-7fs1e). |