48 lines
1.7 KiB
JSON
48 lines
1.7 KiB
JSON
|
{
|
||
|
|
"scope": "native caller and policy with synthetic subject claims; not real human approval",
|
||
|
|
"checks": [
|
||
|
|
{
|
||
|
|
"action": "apply",
|
||
|
|
"case": "admitted-group",
|
||
|
|
"effect": "allow",
|
||
|
|
"policy_package_digest": "sha256:139992f3e0780c7627a52c447df4f9582a180cadb1d71b2b748073f10a42b96e",
|
||
|
|
"caller": "system:serviceaccount:informed-decision:review"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"action": "apply",
|
||
|
|
"case": "unrelated-group",
|
||
|
|
"effect": "deny",
|
||
|
|
"policy_package_digest": "sha256:139992f3e0780c7627a52c447df4f9582a180cadb1d71b2b748073f10a42b96e",
|
||
|
|
"caller": "system:serviceaccount:informed-decision:review"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"action": "verify",
|
||
|
|
"case": "admitted-group",
|
||
|
|
"effect": "allow",
|
||
|
|
"policy_package_digest": "sha256:139992f3e0780c7627a52c447df4f9582a180cadb1d71b2b748073f10a42b96e",
|
||
|
|
"caller": "system:serviceaccount:informed-decision:review"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"action": "verify",
|
||
|
|
"case": "unrelated-group",
|
||
|
|
"effect": "deny",
|
||
|
|
"policy_package_digest": "sha256:139992f3e0780c7627a52c447df4f9582a180cadb1d71b2b748073f10a42b96e",
|
||
|
|
"caller": "system:serviceaccount:informed-decision:review"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"action": "exec",
|
||
|
|
"case": "admitted-group",
|
||
|
|
"effect": "allow",
|
||
|
|
"policy_package_digest": "sha256:139992f3e0780c7627a52c447df4f9582a180cadb1d71b2b748073f10a42b96e",
|
||
|
|
"caller": "system:serviceaccount:informed-decision:review"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"action": "exec",
|
||
|
|
"case": "unrelated-group",
|
||
|
|
"effect": "deny",
|
||
|
|
"policy_package_digest": "sha256:139992f3e0780c7627a52c447df4f9582a180cadb1d71b2b748073f10a42b96e",
|
||
|
|
"caller": "system:serviceaccount:informed-decision:review"
|
||
|
|
}
|
||
|
|
]
|
||
|
|
}
|