Route rapp-qonto workload identity

2026-07-27 20:37:09 +02:00 · 2026-07-27 20:37:09 +02:00 · 2e862bbff0
commit 2e862bbff0
parent d961da1ef2
2 changed files with 45 additions and 0 deletions
--- a/examples/rapp-qonto-posture-conformance.yaml
+++ b/examples/rapp-qonto-posture-conformance.yaml
@ -0,0 +1,20 @@
+environments:
+  prod:
+    backend: openbao-sealed-shamir
+    real_values: generated-fresh-no-reuse
+    unseal: shamir-3-of-5-break-glass
+
+workloads:
+  - id: rapp-qonto
+    env_posture: prod
+    maturity: M3
+
+secret_requests:
+  - secret: binky-qonto-api
+    to_workload: rapp-qonto
+    required_maturity: M3
+    dataclass: restricted
+  - secret: rapp-qonto-keycape-client
+    to_workload: rapp-qonto
+    required_maturity: M3
+    dataclass: confidential