ops-warden/examples/rapp-qonto-posture-conformance.yaml
tegwick 2e862bbff0
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
Route rapp-qonto workload identity
2026-07-27 20:37:09 +02:00

20 lines
453 B
YAML

environments:
prod:
backend: openbao-sealed-shamir
real_values: generated-fresh-no-reuse
unseal: shamir-3-of-5-break-glass
workloads:
- id: rapp-qonto
env_posture: prod
maturity: M3
secret_requests:
- secret: binky-qonto-api
to_workload: rapp-qonto
required_maturity: M3
dataclass: restricted
- secret: rapp-qonto-keycape-client
to_workload: rapp-qonto
required_maturity: M3
dataclass: confidential