Mara Sophie Grosch

> We don't support running as a cluster so it's not an issue. Oh, we don't? What's preventing that if I have the database and media storage external (postgresql and...

Have a workaround at least, but maybe my instance has a slightly different problem due to some ... uh .. fuckery :upside_down_face: ```sql update accounts set avatar_media_attachment_id = null where...

OK, scratch that as workaround - have such errors logged again and this time I didn't do any database fuckery since that posted workaround :upside_down_face:

Also posted this to openssh-unix-dev mailing list, but maybe not received via email by everybody due to DMARC fails. I hate email. Web archive has it, tho

Problem for Gitlab is, it does not provide the name in the `id_token` at all - stating you have to call an API to get it, as written in this...

We could add a config `URL+jsonpath to retrieve name from` though, this isn't completely generic but might work in enough cases for now :tm:

Just looked at the OIDC spec to find if `name` is a required claim and found this info about claims "They can be requested to be returned either in the...

So the use case of having a single object store user that has a defined set of object store buckets (instead of creating the buckets itself, making an intransparent mess)...

@thotz for Gitlab itself it would probably work I'm not working on Gitlab though (at this time at least), but trying to migrate my existing VM-based install over to k8s...

@thotz what do you think, reopen and un-stale this or leave it as-is? I think it's still a relevant use case, but maybe there is a better place for this?