Register create-only Secrets Engine approval requester

Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a09cbb-87c6-7900-a145-4ce53ba9f1a6
2026-09-14 02:47:31 +02:00 · 2026-09-14 02:47:31 +02:00 · 651625c547
commit 651625c547
parent 6bcc2a5919
3 changed files with 71 additions and 0 deletions
--- a/docs/t03-requester-registration.json
+++ b/docs/t03-requester-registration.json
@ -0,0 +1,19 @@
+{
+  "clientId": "secrets-engine-requester",
+  "displayName": "Secrets Engine T03 approval requester",
+  "audience": "approval-engine",
+  "allowedScopes": [
+    "approval:create"
+  ],
+  "grantTypes": [
+    "client_credentials"
+  ],
+  "clientType": "confidential",
+  "secretRef": "env:KEYCAPE_SECRETS_ENGINE_REQUESTER_CLIENT_SECRET",
+  "serviceSubject": "secrets-engine",
+  "tenant": "tenant:platform",
+  "roles": [
+    "secrets-engine-requester"
+  ],
+  "tokenLifetime": "15m"
+}