31 lines
975 B
JSON
31 lines
975 B
JSON
|
{
|
||
|
|
"clients": [
|
||
|
|
{
|
||
|
|
"client_id": "secrets-engine-approval",
|
||
|
|
"live_jwks_signature_verified": true,
|
||
|
|
"exact_claims_verified": true,
|
||
|
|
"lifetime_seconds": 900,
|
||
|
|
"excess_scope_denied": true,
|
||
|
|
"wrong_secret_denied": true,
|
||
|
|
"pod_verify_client_passed": false,
|
||
|
|
"real_predecessor_rotation_tested": false,
|
||
|
|
"observed_wall_clock_expiry": false
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"client_id": "approval-engine-operator",
|
||
|
|
"live_jwks_signature_verified": true,
|
||
|
|
"exact_claims_verified": true,
|
||
|
|
"lifetime_seconds": 900,
|
||
|
|
"excess_scope_denied": true,
|
||
|
|
"wrong_secret_denied": true,
|
||
|
|
"pod_verify_client_passed": false,
|
||
|
|
"real_predecessor_rotation_tested": false,
|
||
|
|
"observed_wall_clock_expiry": false
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"human_client_consume_denied": true,
|
||
|
|
"target": "disposable pinned KeyCape image; synthetic keys and clients only",
|
||
|
|
"pod_cli_verification": "deferred to live in-pod check",
|
||
|
|
"cleanup_complete": true
|
||
|
|
}
|