Repository navigation

RFC: Service Accounts for Cloud Foundry Workload Identity - #1645

Open

rkoster wants to merge 26 commits into

cloudfoundry:mainfrom

rkoster:rfc-service-accounts

Open

RFC: Service Accounts for Cloud Foundry Workload Identity#1645
rkoster wants to merge 26 commits into
cloudfoundry:mainfrom
rkoster:rfc-service-accounts

Commits on Oct 6, 2026
- Add draft RFC for space-owned workload service accounts
  rkoster
  committed
  f1bb1d3
- Link service-account RFC to its draft pull request
  rkoster
  committed
  eb255d7
- Make service-account RFC self-contained and align creation permissions
  rkoster
  committed
  d468a22
- Propose service account limits in space quotas
  rkoster
  committed
  bddccad
- Propose admin-only recovery of tombstoned service account names
  rkoster
  committed
  5688075
- Present service-account RFC through developer workflows and diagrams
  rkoster
  committed
  e53872b
- Lead service-account RFC with federation and broker use cases
  rkoster
  committed
  cd0ec87
- Clarify credential issuance and lead with external object storage
  rkoster
  committed
  7fcc6b9
- Describe OSBAPI and route-policy integration in service-account RFC
  rkoster
  committed
  ccfe2e4
- Use cf:svc prefix for service-account route-policy sources
  rkoster
  committed
  165edb8
- Explain account route access in developer-facing terms
  rkoster
  committed
  af452de
- Remove routing implementation detail from service-account RFC
  rkoster
  committed
  79837f0
- Distinguish agreed UAA authentication from remaining account profile work
  rkoster
  committed
  7a146ca
- Illustrate certificate SAN matching against account route policy
  rkoster
  committed
  05a59db
- Remove distracting route-policy diagram from RFC
  rkoster
  committed
  1d6707d
- Keep UAA review follow-ups out of RFC delivery summary
  rkoster
  committed
  0cfb83d
- Focus RFC next step on community review and approval
  rkoster
  committed
  e73e347
- Explain account disable and enable lifecycle explicitly
  rkoster
  committed
  cdf2620
- Reference RFC 1123 label syntax for account names
  rkoster
  committed
  5c797fc
Commits on Oct 7, 2026
- Define configurable creation budget with platform admin exemption
  rkoster
  committed
  8d5aff3
- Specify cascading service-account cleanup on space and org deletion
  rkoster
  committed
  a1647ff
Commits on Oct 14, 2026
- Restructure service-account RFC for readability and simplify broker integration
  rkoster
  committed
  fe94f46
Commits on Oct 16, 2026
- Reference UAA trust bundles for account clients and simplify CA rotation
  rkoster
  committed
  39b151f
Commits on Oct 21, 2026
- Own service accounts by org with explicit space entitlements
  rkoster
  committed
  ce0af13
Commits on Oct 29, 2026
- Clarify mTLS deployment and provider-specific federation audiences
  rkoster
  committed
  3d11025
- Use proposed named resource policies in RFC client registration
  rkoster
  committed
  54d1c1f

Commits

Commits on Oct 6, 2026

Commits on Oct 7, 2026

Commits on Oct 14, 2026

Commits on Oct 16, 2026

Commits on Oct 21, 2026

Commits on Oct 29, 2026