access-engine/examples/secrets-engine/signer-receipt-admission.template.json
tegwick 919ce25a37
Some checks failed
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 2s
Build and Publish Container Image / build-and-push (push) Failing after 59s
Prepare signed lifecycle runtime admission and receipt verification
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a140c4-354a-7823-8f0d-8f717397f786
2026-10-16 10:48:28 +02:00

17 lines
886 B
JSON

{
"schema": "access-engine.signer-receipt-check.v1",
"trust_file": "/absolute/owner-admitted/public-trust.json",
"verifier": "/absolute/installed/secrets-engine-pdp-verify",
"verifier_sha256": "REPLACE_WITH_INDEPENDENTLY_REVIEWED_INSTALLED_HELPER_SHA256",
"allow_request": "/absolute/sanitized-native-receipts/allow-request.json",
"allow_envelope": "/absolute/sanitized-native-receipts/allow-envelope.json",
"allow_record": "/absolute/sanitized-native-receipts/allow-source-record.json",
"deny_request": "/absolute/sanitized-native-receipts/deny-request.json",
"deny_envelope": "/absolute/sanitized-native-receipts/deny-envelope.json",
"deny_record": "/absolute/sanitized-native-receipts/deny-source-record.json",
"expected_caller": {
"mode": "enforce",
"principal": "system:serviceaccount:secrets-engine:secrets-engine",
"audience": "flex-auth"
}
}