ops-warden/src/warden
tegwick 8e9383a33a feat: opt-in flex-auth policy gate and OpenBao verify (WP-0007)
Add policy.py client that calls flex-auth /v1/check before sign/issue when
policy.enabled is true. Record policy_decision_id in signatures.log. Default
off preserves existing inventory-only behavior. Document production OpenBao
health probe and update config/wiki references.
2026-06-17 08:37:14 +02:00
..
scripts Initial Commit 2026-03-28 00:45:43 +00:00
__init__.py Initial Commit 2026-03-28 00:45:43 +00:00
ca.py feat: opt-in flex-auth policy gate and OpenBao verify (WP-0007) 2026-06-17 08:37:14 +02:00
cli.py feat: opt-in flex-auth policy gate and OpenBao verify (WP-0007) 2026-06-17 08:37:14 +02:00
config.py feat: opt-in flex-auth policy gate and OpenBao verify (WP-0007) 2026-06-17 08:37:14 +02:00
inventory.py Initial Commit 2026-03-28 00:45:43 +00:00
models.py feat: opt-in flex-auth policy gate and OpenBao verify (WP-0007) 2026-06-17 08:37:14 +02:00
policy.py feat: opt-in flex-auth policy gate and OpenBao verify (WP-0007) 2026-06-17 08:37:14 +02:00
scorecard.py feat(warden): WARDEN-WP-0003 — test coverage, permissions, status --state-dir 2026-05-15 17:05:38 +02:00
vault.py feat(warden): WARDEN-WP-0003 — test coverage, permissions, status --state-dir 2026-05-15 17:05:38 +02:00