FLEX-WP-0006: implement ops-warden signing gate policy
This commit is contained in:
parent
53e0d055c9
commit
0fde95a87c
25 changed files with 1796 additions and 10 deletions
23
examples/ops-warden/check_request_allow_adm.json
Normal file
23
examples/ops-warden/check_request_allow_adm.json
Normal file
|
|
@ -0,0 +1,23 @@
|
|||
{
|
||||
"id": "check:ops-warden-platform-steward-adm",
|
||||
"tenant": "tenant:platform",
|
||||
"subject": {
|
||||
"id": "platform-steward",
|
||||
"type": "adm"
|
||||
},
|
||||
"action": "sign",
|
||||
"resource": {
|
||||
"id": "ssh-cert:actor/platform-steward",
|
||||
"type": "ssh-certificate",
|
||||
"system": "ops-warden"
|
||||
},
|
||||
"context": {
|
||||
"principals": [
|
||||
"platform",
|
||||
"root"
|
||||
],
|
||||
"actor_type": "adm",
|
||||
"ttl_hours": 4,
|
||||
"pubkey_fingerprint": "SHA256:example-adm-fingerprint"
|
||||
}
|
||||
}
|
||||
Loading…
Add table
Add a link
Reference in a new issue