flex-auth/values/secrets-engine.yaml
tegwick 6e3dfaeb41
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 2s
Enforce verified secrets-engine operator caller identity
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a0726e-5232-73f2-aaca-2c05ceb62efb
2026-09-06 23:38:36 +02:00

21 lines
663 B
YAML

# Dedicated secrets-engine policy service; CI build main-d98323b.
name: flex-auth-secrets-engine
image:
repository: forgejo.coulomb.social/coulomb/flex-auth
digest: sha256:db1c4f7e621c7ea119489a321d7db0e05da09afc17be5f69d873b2b3c7f60cfc
args:
- serve
- --addr
- 0.0.0.0:8080
- --registry
- /opt/flex-auth/examples/secrets-engine/registry_snapshot.json
- --policy
- /opt/flex-auth/examples/secrets-engine/policy_package.md
callerAuth:
mode: enforce
kubernetesURL: https://10.43.0.1
binding: secrets-engine=system:serviceaccount:secrets-engine:secrets-engine
consumer:
isolated: false
namespace: secrets-engine
podName: secrets-engine