tegwick
4a915ce6c7
T02 done. Deployed user-engine digest c501aeb2 reads the projected flex-auth token per decision (verified in the running container); flex-auth-user-engine 138aa347 serves with caller-auth enforce. Probes: valid 200 decision:d9aef25f08e17b84, missing token 401, wrong-system 403. Closes manifest drift: runtime.yaml pinned e3b5f65b, the digest T01 warned against, while the cluster ran c501aeb2. Re-applying it would have rolled the portal back to an image that cannot authenticate to a PDP now in enforce. kubectl diff is now empty. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| credential-management_v0.2.md | ||
| iam-profile_v0.2.md | ||
| iam-profile_v0.3.md | ||
| playbook-capability-contract_v0.1.md | ||
| tenancy-posture_v0.1.md | ||
| tenant-engine-boundary-contract_v0.1.md | ||
| user-engine-boundary-contract_v0.1.md | ||