Add policy.py client that calls flex-auth /v1/check before sign/issue when policy.enabled is true. Record policy_decision_id in signatures.log. Default off preserves existing inventory-only behavior. Document production OpenBao health probe and update config/wiki references. |
||
|---|---|---|
| .. | ||
| scripts | ||
| __init__.py | ||
| ca.py | ||
| cli.py | ||
| config.py | ||
| inventory.py | ||
| models.py | ||
| policy.py | ||
| scorecard.py | ||
| vault.py | ||