tegwick
4d5ae6e7ec
Candidate image forgejo.coulomb.social/coulomb/flex-auth@sha256:dce2ce6f1def41d162c999818caeee09dc5404331f305b0d20306fade450dd6c
(revision label f4c9f2b). Read-only checks: v14 and v13 policy directories
byte-identical to source, package digests 8911458f (v14) and 31be5985 (v13),
in-image validate 46/46 and 32/32, offline verify requests answer
self_approval_refused / approval_action_not_admitted on v14, Trivy
HIGH/CRITICAL = 0 (same pinned scanner). Values, twin, pin test, runbook
(scan gate passed; informed-decision side ready at RELEASE_SHA 005709a3,
image ca75f0be, carrying 80ef840) and evidence move to this digest; the
154726d2 image is superseded.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 5502@bnt-lap001
Assistant-Session: 68b3b02f-5d0f-4e71-8421-796f62e50196
32 lines
1.1 KiB
YAML
32 lines
1.1 KiB
YAML
# FLEX-WP-0040-T07 release candidate (founder-approved 2026-11-01; NOT yet applied):
|
|
# compact-sitting v14 sha256:8911458f36f1a60598aa19592a2d752a74dffe2617fd86238407ac87bc300fde,
|
|
# CI image main-f4c9f2b (Go 1.26.10). Runbook: docs/compact-sitting-v14-release-runbook.md.
|
|
# In force before this release (Helm rev 13, FLEX-WP-0034, v13): image 6c6dc263...168e,
|
|
# exact values values/informed-decision-lifecycle-review.candidate.yaml (rollback).
|
|
name: flex-auth-informed-decision-sitting
|
|
image:
|
|
repository: forgejo.coulomb.social/coulomb/flex-auth
|
|
digest: sha256:dce2ce6f1def41d162c999818caeee09dc5404331f305b0d20306fade450dd6c
|
|
args:
|
|
- serve
|
|
- --addr
|
|
- 0.0.0.0:8080
|
|
- --registry
|
|
- /opt/flex-auth/examples/informed-decision-lifecycle-review/registry.json
|
|
- --policy
|
|
- /opt/flex-auth/examples/informed-decision-present-existing-review/policy.md
|
|
callerAuth:
|
|
mode: enforce
|
|
kubernetesURL: https://10.43.0.1
|
|
binding: informed-decision=system:serviceaccount:informed-decision:review
|
|
consumer:
|
|
isolated: false
|
|
namespace: informed-decision
|
|
podName: informed-decision
|
|
resources:
|
|
requests:
|
|
cpu: 5m
|
|
memory: 40Mi
|
|
limits:
|
|
cpu: 300m
|
|
memory: 192Mi
|