panxiao81
88a02ababa
Reorganize the brownfield repository, remove retired and generated artifacts, harden ignore rules, and record the GitOps/IaC redesign.
7 lines
267 B
HCL
7 lines
267 B
HCL
# Ansible managed
|
|
# Broad admin for human OIDC logins (mapped from the vault-admins AD group).
|
|
# Homelab-broad on purpose; scope down to specific mounts if you want least privilege.
|
|
path "*" {
|
|
capabilities = ["create", "read", "update", "delete", "list", "sudo"]
|
|
}
|