Actions
User Story #300
open
Epic #49: Implement user, groups and permissions management
Feature #272: Agent identity
As an administrator, I want to enrol a new node with a one-off token, so that only nodes I invited can join
User Story #300:
As an administrator, I want to enrol a new node with a one-off token, so that only nodes I invited can join
Start date:
Due date:
% Done:
0%
Estimated time:
Description
A node joining the installation is a trust decision, and it should be made once, deliberately, without a permanent secret being copied around.
Acceptance criteria
- An administrator can generate an enrolment token, valid briefly and usable once
- A node presenting a valid token is registered and receives its own lasting credential
- A token that is expired, already used or unknown is refused
- Enrolment is recorded: which token, which node, when
- Generating a token requires the appropriate permission
Rejection reason
Superseded by the rewritten epic #49
Updated by
Actions