18 lines
886 B
JSON
18 lines
886 B
JSON
|
{
|
||
|
|
"schema": "access-engine.signer-receipt-check.v1",
|
||
|
|
"trust_file": "/absolute/owner-admitted/public-trust.json",
|
||
|
|
"verifier": "/absolute/installed/secrets-engine-pdp-verify",
|
||
|
|
"verifier_sha256": "REPLACE_WITH_INDEPENDENTLY_REVIEWED_INSTALLED_HELPER_SHA256",
|
||
|
|
"allow_request": "/absolute/sanitized-native-receipts/allow-request.json",
|
||
|
|
"allow_envelope": "/absolute/sanitized-native-receipts/allow-envelope.json",
|
||
|
|
"allow_record": "/absolute/sanitized-native-receipts/allow-source-record.json",
|
||
|
|
"deny_request": "/absolute/sanitized-native-receipts/deny-request.json",
|
||
|
|
"deny_envelope": "/absolute/sanitized-native-receipts/deny-envelope.json",
|
||
|
|
"deny_record": "/absolute/sanitized-native-receipts/deny-source-record.json",
|
||
|
|
"expected_caller": {
|
||
|
|
"mode": "enforce",
|
||
|
|
"principal": "system:serviceaccount:secrets-engine:secrets-engine",
|
||
|
|
"audience": "flex-auth"
|
||
|
|
}
|
||
|
|
}
|