chris/OSVauco
1
0
Fork 0
Code Issues 1 Pull Requests Actions 2 Packages Projects Releases Wiki Activity

fix: korrekt IAP_CLIENT_ID i docs + session log 2026-06-28
Some checks are pending
Check Python Version Consistency / Check Python Version (push) Waiting to run
Details

Browse Source
This commit is contained in:
Chris Christiansen 2026-06-28 10:15:57 +00:00
parent c45613982b
commit e71bc8d0e1
2 changed files with 12 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
docs/HANDOFF.md
View File

@ -70,7 +70,7 @@
- **Gitea API-token:** Secret Manager → `gitea-api-token` - **Gitea API-token:** Secret Manager → `gitea-api-token`
- **MCP-Secret:** Secret Manager → `mcp-secret` - **MCP-Secret:** Secret Manager → `mcp-secret`
- **Prosjekt:** `propane-will-491900-m5` - **Prosjekt:** `propane-will-491900-m5`
- **IAP OAuth Client ID (opax backend):** `357036551735-kq8nt71d38hfqlcfb3n52ef7ala4meo.apps.googleusercontent.com` - **IAP OAuth Client ID (opax backend):** `357036551735-kq8nt7ld38hfqlcfb3n52ef7tala4meo.apps.googleusercontent.com`
- **IAP Backend Service path:** `/projects/357036551735/global/backendServices/<navn>` (satt som `OPAX_IAP_CLIENT_ID` i Cloud Run) - **IAP Backend Service path:** `/projects/357036551735/global/backendServices/<navn>` (satt som `OPAX_IAP_CLIENT_ID` i Cloud Run)
--- ---
@ -94,7 +94,7 @@ Kjør fra `osvauco-dev-vm`:
```bash ```bash
# Hent identity token med korrekt IAP audience # Hent identity token med korrekt IAP audience
TOKEN=$(curl -s -H "Metadata-Flavor: Google" \ TOKEN=$(curl -s -H "Metadata-Flavor: Google" \
"http://metadata.google.internal/computeMetadata/v1/instance/service-accounts/default/identity?audience=357036551735-kq8nt71d38hfqlcfb3n52ef7ala4meo.apps.googleusercontent.com&format=full") "http://metadata.google.internal/computeMetadata/v1/instance/service-accounts/default/identity?audience=357036551735-kq8nt7ld38hfqlcfb3n52ef7tala4meo.apps.googleusercontent.com&format=full")
# Test mot opax via IAP load balancer # Test mot opax via IAP load balancer
curl -si https://opax.vauco.no/opax/build-status \ curl -si https://opax.vauco.no/opax/build-status \

10
docs/OSVAUCO_OPAX_SESSION_LOG.md
View File

@ -237,3 +237,13 @@ Manuelt verifisere `/billing/summary` via nettleser-login på opax.vauco.no (sje
- Slutt : 2026-06-28 01:46 UTC - Slutt : 2026-06-28 01:46 UTC
- Gjort : --- - Gjort : ---
- Uløst : --- - Uløst : ---
## SLUTTRAPPORT — 2026-06-28 — IAP auth verifisering
- Hva: Verifisert IAP auth ende-til-ende fra osvauco-dev-vm
- Rotårsak 401: Skrivefeil i IAP_CLIENT_ID i docs — korrekt ID hentet fra gcloud run services describe opax-mcp
- Korrekt IAP_CLIENT_ID: 357036551735-kq8nt7ld38hfqlcfb3n52ef7tala4meo.apps.googleusercontent.com
- Verifisering: HTTP/2 200 fra https://opax.vauco.no/opax/build-status
- Filer rettet: docs/HANDOFF.md, docs/LEARNINGS.md
## NESTE OPPGAVE
Bootstrap Emma på VM: synk Gitea fra GitHub, deretter kjør emma/setup.sh