coulomb/access-engine
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Prepare renamed Access Engine runtime twins with exact reviewer scope
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details
Build and Publish Container Image / build-and-push (push) Successful in 1m2s
Details

Browse source 
Assistant: codex
Assistant-Model: gpt-6.1-sol
Assistant-Session: 01a126e1-76f8-7643-8cf3-e93336539ade
This commit is contained in:
tegwick 2026-10-11 22:53:54 +02:00
parent 0bc15925e9
commit dd15d8cf3f
26 changed files with 1480 additions and 26 deletions
Download patch file Download diff file Expand all files Collapse all files

34
values/access-engine/application-readback.yaml Normal file
View file

@ -0,0 +1,34 @@
# GENERATED by tools/gen_runtime_twins.py; same image/package as existing twin.
name: access-engine-application-readback
image:
repository: forgejo.coulomb.social/coulomb/flex-auth
digest: sha256:e8c57c18a4a9d5583be099146984f7e9cd881446218b65aeefd7619b18aa9229
args:
- serve-readback
- --addr
- 0.0.0.0:8080
- --registry
- /opt/flex-auth/examples/application-readback/registry_snapshot.json
- --registry
- /opt/flex-auth/examples/informed-decision-lifecycle/registry.json
- --package
- informed-decision=/opt/flex-auth/examples/informed-decision-lifecycle/policy.md
callerAuth:
mode: enforce
kubernetesURL: https://10.43.0.1
audience: access-engine
readback:
enabled: true
caller: system:serviceaccount:user-engine:user-engine
consumer:
isolated: false
namespace: user-engine
podName: user-engine
resources:
requests:
cpu: 5m
memory: 32Mi
limits:
cpu: 300m
memory: 192Mi
namespace: access-engine

30
values/access-engine/informed-decision-lifecycle.yaml Normal file
View file

@ -0,0 +1,30 @@
# GENERATED by tools/gen_runtime_twins.py; same image/package as existing twin.
name: access-engine-informed-decision-lifecycle
image:
repository: forgejo.coulomb.social/coulomb/flex-auth
digest: sha256:e8c57c18a4a9d5583be099146984f7e9cd881446218b65aeefd7619b18aa9229
args:
- serve
- --addr
- 0.0.0.0:8080
- --registry
- /opt/flex-auth/examples/informed-decision-lifecycle/registry.json
- --policy
- /opt/flex-auth/examples/informed-decision-lifecycle/policy.md
callerAuth:
mode: enforce
kubernetesURL: https://10.43.0.1
binding: informed-decision=system:serviceaccount:informed-decision:review
audience: access-engine
consumer:
isolated: false
namespace: informed-decision
podName: informed-decision
resources:
requests:
cpu: 5m
memory: 32Mi
limits:
cpu: 300m
memory: 192Mi
namespace: access-engine

30
values/access-engine/informed-decision-sitting.yaml Normal file
View file

@ -0,0 +1,30 @@
# GENERATED by tools/gen_runtime_twins.py; same image/package as existing twin.
name: access-engine-informed-decision-sitting
image:
repository: forgejo.coulomb.social/coulomb/flex-auth
digest: sha256:bdac62bc3f089cba0df7c35eeb8d0d9b3af2d4bae5e4ea4767516c1ed20b1e99
args:
- serve
- --addr
- 0.0.0.0:8080
- --registry
- /opt/flex-auth/examples/informed-decision-lifecycle-review/registry.json
- --policy
- /opt/flex-auth/examples/informed-decision-lifecycle-review/policy.md
callerAuth:
mode: enforce
kubernetesURL: https://10.43.0.1
binding: informed-decision=system:serviceaccount:informed-decision:review
audience: access-engine
consumer:
isolated: false
namespace: informed-decision
podName: informed-decision
resources:
requests:
cpu: 5m
memory: 32Mi
limits:
cpu: 300m
memory: 192Mi
namespace: access-engine

30
values/access-engine/informed-decision-t03.yaml Normal file
View file

@ -0,0 +1,30 @@
# GENERATED by tools/gen_runtime_twins.py; same image/package as existing twin.
name: access-engine-informed-decision-t03
image:
repository: forgejo.coulomb.social/coulomb/flex-auth
digest: sha256:6600c7a62c36dfb4fbb42590722613827d07ff49875b1f0f4b5de63d8351658d
args:
- serve
- --addr
- 0.0.0.0:8080
- --registry
- /opt/flex-auth/examples/informed-decision-t03/registry.json
- --policy
- /opt/flex-auth/examples/informed-decision-t03/policy.md
callerAuth:
mode: enforce
kubernetesURL: https://10.43.0.1
binding: informed-decision=system:serviceaccount:informed-decision:review
audience: access-engine
consumer:
isolated: false
namespace: informed-decision
podName: informed-decision
resources:
requests:
cpu: 5m
memory: 32Mi
limits:
cpu: 300m
memory: 192Mi
namespace: access-engine

23
values/access-engine/ops-warden-fetch.yaml Normal file
View file

@ -0,0 +1,23 @@
# GENERATED by tools/gen_runtime_twins.py; same image/package as existing twin.
name: access-engine-ops-warden-fetch
image:
repository: forgejo.coulomb.social/coulomb/flex-auth
digest: sha256:419bc37420d0d0a5304a8587448f1fdbf87117fb041fb43081b0449b4a7bb13b
args:
- serve
- --addr
- 0.0.0.0:8080
- --registry
- /opt/flex-auth/examples/ops-warden-fetch/registry_snapshot.json
- --policy
- /opt/flex-auth/examples/ops-warden-fetch/policy_package.md
callerAuth:
mode: enforce
kubernetesURL: https://10.43.0.1
binding: key-cape=system:serviceaccount:ops-warden:ops-warden
extraBindings:
- railiance-platform=system:serviceaccount:ops-warden:ops-warden
audience: access-engine
consumer:
isolated: true
namespace: access-engine

21
values/access-engine/ops-warden.yaml Normal file
View file

@ -0,0 +1,21 @@
# GENERATED by tools/gen_runtime_twins.py; same image/package as existing twin.
name: access-engine-ops-warden
image:
repository: forgejo.coulomb.social/coulomb/flex-auth
digest: sha256:138aa3471c46bca6e814691fa1e6520aedda3dffd743e6b09141ab433afdb64b
args:
- serve
- --addr
- 0.0.0.0:8080
- --registry
- /opt/flex-auth/examples/ops-warden/production_registry_snapshot.json
- --policy
- /opt/flex-auth/examples/ops-warden/policy_package.md
callerAuth:
mode: enforce
kubernetesURL: https://10.43.0.1
binding: ops-warden=system:serviceaccount:ops-warden:ops-warden
audience: access-engine
consumer:
isolated: true
namespace: access-engine

23
values/access-engine/secrets-engine.yaml Normal file
View file

@ -0,0 +1,23 @@
# GENERATED by tools/gen_runtime_twins.py; same image/package as existing twin.
name: access-engine-secrets-engine
image:
repository: forgejo.coulomb.social/coulomb/flex-auth
digest: sha256:05a03a8790c2210c48ea92391441c77ddf640d0cd32f5ec09838f5393171fcbd
args:
- serve
- --addr
- 0.0.0.0:8080
- --registry
- /opt/flex-auth/examples/secrets-engine/registry_snapshot.json
- --policy
- /opt/flex-auth/examples/secrets-engine/policy_package.md
callerAuth:
mode: enforce
kubernetesURL: https://10.43.0.1
binding: secrets-engine=system:serviceaccount:secrets-engine:secrets-engine
audience: access-engine
consumer:
isolated: false
namespace: secrets-engine
podName: secrets-engine
namespace: access-engine

23
values/access-engine/tenant-engine.yaml Normal file
View file

@ -0,0 +1,23 @@
# GENERATED by tools/gen_runtime_twins.py; same image/package as existing twin.
name: access-engine-tenant-engine
image:
repository: forgejo.coulomb.social/coulomb/flex-auth
digest: sha256:05a03a8790c2210c48ea92391441c77ddf640d0cd32f5ec09838f5393171fcbd
args:
- serve
- --addr
- 0.0.0.0:8080
- --registry
- /opt/flex-auth/examples/tenant-engine/registry_snapshot.json
- --policy
- /opt/flex-auth/examples/tenant-engine/policy_package.md
callerAuth:
mode: enforce
kubernetesURL: https://10.43.0.1
binding: tenant-engine=system:serviceaccount:tenant-engine:tenant-engine
audience: access-engine
consumer:
isolated: false
namespace: tenant-engine
podName: tenant-engine
namespace: access-engine

23
values/access-engine/user-engine.yaml Normal file
View file

@ -0,0 +1,23 @@
# GENERATED by tools/gen_runtime_twins.py; same image/package as existing twin.
name: access-engine-user-engine
image:
repository: forgejo.coulomb.social/coulomb/flex-auth
digest: sha256:138aa3471c46bca6e814691fa1e6520aedda3dffd743e6b09141ab433afdb64b
args:
- serve
- --addr
- 0.0.0.0:8080
- --registry
- /opt/flex-auth/examples/user-engine/registry_snapshot.json
- --policy
- /opt/flex-auth/examples/user-engine/policy_package.md
callerAuth:
mode: enforce
kubernetesURL: https://10.43.0.1
binding: user-engine=system:serviceaccount:user-engine:user-engine
audience: access-engine
consumer:
isolated: false
namespace: user-engine
podName: user-engine
namespace: access-engine