ops-warden/examples/inventory.seed.yaml
tegwick 7ce58ae638
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
feat: adopt security zones and explicit workload refs
Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a0291a-1e87-7151-9934-fcbfe3f65eb1
2026-08-22 15:36:37 +02:00

53 lines
1.3 KiB
YAML

# Non-secret inventory template — copy to ~/.config/warden/inventory.yaml
# and adjust for your environment. Do not commit real operator paths or keys.
#
# See wiki/ActorInventoryPatterns.md and wiki/OpsWardenConfig.md
actors:
agt-state-hub-bridge:
type: agt
principals:
- agt-task-bridge
ttl_hours: 24
description: "ops-bridge tunnel agent for state-hub"
zone_subject:
applicability: applicable
workload_id: ops-bridge-tunnel
agt-codex-interhub-bootstrap:
type: agt
principals:
- agt-interhub-bootstrap
ttl_hours: 2
description: "Short-lived agent access for attended Inter-Hub bootstrap"
zone_subject:
applicability: applicable
workload_id: codex-interhub-bootstrap
adm-example:
type: adm
principals:
- adm-full
ttl_hours: 48
description: "Example human operator — replace with per-person adm-* actors"
zone_subject:
applicability: not-applicable
reason: human operator retains native actor identity
atm-backup-daily:
type: atm
principals:
- atm-backup-daily
ttl_hours: 8
description: "Example nightly automation actor"
zone_subject:
applicability: applicable
workload_id: backup-daily
hosts:
example-host:
allowed_principals:
agt:
- agt-task-bridge
atm:
- atm-backup-daily