ory · Mahadevaprasad1998 · Oct 8, 2025 · Oct 8, 2025 · Oct 13, 2025 · Oct 14, 2025
diff --git a/.github/workflows/vault-auth.yml b/.github/workflows/vault-auth.yml
@@ -0,0 +1,40 @@
+name: Vault OIDC Auth Test
+
+on:
+  push:
+    branches:
+      - main
+
+permissions:
+  id-token: write
+  contents: read
+
+jobs:
+  vault-auth:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v3
+
+      - name: Install jq
+        run: sudo apt-get install jq -y
+
+      - name: Request GitHub OIDC token
+        id: oidc
+        run: |
+          echo "OIDC_TOKEN=$(curl -s -H \"Authorization: bearer $ACTIONS_ID_TOKEN_REQUEST_TOKEN\" \
+            \"$ACTIONS_ID_TOKEN_REQUEST_URL\" | jq -r .value)" >> $GITHUB_ENV
+
+      - name: Authenticate to Vault
+        run: |
+          echo "Authenticating to Vault..."
+          response=$(curl --silent --request POST \
+            --data "{\"jwt\": \"$OIDC_TOKEN\", \"role\": \"github-actions\"}" \
+            https://vault.yourdomain.com/v1/auth/jwt/login)
+          echo "Vault response: $response"
+          echo "VAULT_TOKEN=$(echo $response | jq -r .auth.client_token)" >> $GITHUB_ENV
+
+      - name: (Optional) Read secret from Vault
+        run: |
+          curl --header "X-Vault-Token: $VAULT_TOKEN" \
+            https://vault.yourdomain.com/v1/secret/data/github/kratos_admin_token
diff --git a/.gitignore b/.gitignore
@@ -107,3 +107,5 @@ pnpm-lock.yaml
 # Ignore the elements repository that gets cloned in on npm install
 elements/
 .bin/
+
+/src/generated/prisma
diff --git a/.token.txt b/.token.txt
diff --git a/Accept b/Accept
diff --git a/Authorization b/Authorization
diff --git a/GET b/GET
diff --git a/Host b/Host
diff --git a/Jira backlog-Kratos.csv b/Jira backlog-Kratos.csv
diff --git a/Kratos-Playbook.txt b/Kratos-Playbook.txt