Andrew Stoltz 9a58fd2af6 oidc: flip enforcement ON for knowledge + distribution (no-live-proof, fix-forward) ...

Operator 2026-06-04: nothing is production yet, flip OIDC + fix-forward (no
browser-proof gate). knowledge: Auth__Enabled false->true (OIDC env already
wired). distribution: add OIDC env block (Authority/Audience/ClientId=distribution,
ClientSecret from distribution-oidc-client) + Enabled=true; public read/entitlement
+ Method() allowlist stay open (OIDC gates admin only). Clients already provisioned
(secrets present). ArgoCD deploys both.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-06-03 23:38:48 -05:00

19 KiB

Raw Blame History

View Raw