Register informed-decision-sitting-requester as create-only.
Some checks failed
Authentication acceptance / acceptance (push) Failing after 1m7s
Authentication acceptance / provider-contract (push) Successful in 15s
Build and Publish Container Image / build-and-push (push) Successful in 40s

Pin tenant:platform, approval:create only, and the KeyCape env name.
Live secret custody remains railiance-platform attended apply.

Assistant: grok
Assistant-Session: 01a0a23b-3bf0-7341-b4e5-9dc05f72573a
This commit is contained in:
tegwick 2026-09-15 20:08:07 +02:00
parent f67d98ff63
commit 1620ce2edd
3 changed files with 76 additions and 0 deletions

View file

@ -117,3 +117,19 @@ clients:
roles:
- secrets-engine-requester
tokenLifetime: 15m
# Compact sitting presenter; actor is informed-decision, not secrets-engine.
- clientId: informed-decision-sitting-requester
displayName: Informed Decision compact-sitting approval requester
audience: approval-engine
allowedScopes:
- approval:create
grantTypes:
- client_credentials
clientType: confidential
secretRef: env:KEYCAPE_INFORMED_DECISION_SITTING_REQUESTER_CLIENT_SECRET
serviceSubject: informed-decision
tenant: tenant:platform
roles:
- informed-decision-sitting-requester
tokenLifetime: 15m