access-engine/values/informed-decision-lifecycle.yaml
tegwick bb14ec679c FLEX-WP-0035-T04: application-readback pin values; lifecycle pin to v2 image
- values/application-readback.yaml: serve-readback, enforce, readback caller
  user-engine, ingress from user-engine only
- chart: readback.enabled renders --readback-caller instead of --caller-binding
- lifecycle pin to e8c57c18 (main-b5da745, lifecycle v2); previous bdac62bc
- TestReadbackPinMatchesParticipantPins: same image digest and package path

Founder go 2026-10-10.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 735967@bnt-lap001
Assistant-Session: 5971967f-77f8-4ced-9e02-c6ef67040ffc
2026-10-10 12:38:43 +02:00

30 lines
946 B
YAML

# Founder-approved INFD-WP-0007 / FLEX-WP-0033 cutover, 2026-10-04.
# Lifecycle v2 (application.access), founder-approved FLEX-WP-0035-T04, 2026-10-10.
# Previous stable: sha256:bdac62bc3f089cba0df7c35eeb8d0d9b3af2d4bae5e4ea4767516c1ed20b1e99
name: flex-auth-informed-decision-lifecycle
image:
repository: forgejo.coulomb.social/coulomb/flex-auth
digest: sha256:e8c57c18a4a9d5583be099146984f7e9cd881446218b65aeefd7619b18aa9229
args:
- serve
- --addr
- 0.0.0.0:8080
- --registry
- /opt/flex-auth/examples/informed-decision-lifecycle/registry.json
- --policy
- /opt/flex-auth/examples/informed-decision-lifecycle/policy.md
callerAuth:
mode: enforce
kubernetesURL: https://10.43.0.1
binding: informed-decision=system:serviceaccount:informed-decision:review
consumer:
isolated: false
namespace: informed-decision
podName: informed-decision
resources:
requests:
cpu: 5m
memory: 32Mi
limits:
cpu: 300m
memory: 192Mi