# Dedicated secrets-engine policy service; CI build main-d98323b.
name: flex-auth-secrets-engine
image:
  repository: forgejo.coulomb.social/coulomb/flex-auth
  digest: sha256:db1c4f7e621c7ea119489a321d7db0e05da09afc17be5f69d873b2b3c7f60cfc
args:
  - serve
  - --addr
  - 0.0.0.0:8080
  - --registry
  - /opt/flex-auth/examples/secrets-engine/registry_snapshot.json
  - --policy
  - /opt/flex-auth/examples/secrets-engine/policy_package.md
callerAuth:
  mode: enforce
  kubernetesURL: https://10.43.0.1
  binding: secrets-engine=system:serviceaccount:secrets-engine:secrets-engine
consumer:
  isolated: false
  namespace: secrets-engine
  podName: secrets-engine