# OpenZaak setup_configuration (idempotent, declarative).
# Provisions the JWT client the seed + ACL use to call OpenZaak's APIs.
# Dev-only credentials — not for production.
#
# Steps come from vng_api_common.contrib.setup_configuration (see ADR-0002).

vng_api_common_credentials_config_enable: true
vng_api_common_credentials:
  items:
    - identifier: big-reference-seed
      secret: insecure-dev-secret-change-me

vng_api_common_applicaties_config_enable: true
vng_api_common_applicaties:
  items:
    # uuid must be given explicitly as a string (the step's auto-default is a
    # UUID object that fails its own validation).
    - uuid: "11111111-1111-4111-8111-111111111111"
      client_ids:
        - big-reference-seed
      label: BIG reference seed client
      heeft_alle_autorisaties: true