coulomb/access-engine
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

FLEX-WP-0035-T04: application-readback pin values; lifecycle pin to v2 image

Browse source 
- values/application-readback.yaml: serve-readback, enforce, readback caller
  user-engine, ingress from user-engine only
- chart: readback.enabled renders --readback-caller instead of --caller-binding
- lifecycle pin to e8c57c18 (main-b5da745, lifecycle v2); previous bdac62bc
- TestReadbackPinMatchesParticipantPins: same image digest and package path

Founder go 2026-10-10.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 735967@bnt-lap001
Assistant-Session: 5971967f-77f8-4ced-9e02-c6ef67040ffc
This commit is contained in:
tegwick 2026-10-10 12:38:43 +02:00
parent cb48d0702c
commit bb14ec679c
5 changed files with 126 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

6
charts/flex-auth/values.yaml
View file

@ -40,6 +40,12 @@ consumer:
# disabled keeps the image bootable without TokenReview (isolated canary).
# Production pins set warn, then enforce, independently per consumer.
# serve-readback pins (FLEX-WP-0035) admit one readback caller via
# --readback-caller instead of --caller-binding.
readback:
enabled: false
caller: ""
callerAuth:
mode: disabled
audience: flex-auth