2026-08-20 23:31:47 +02:00
|
|
|
# Exact-scope parent policy for the renewable ESO token that projects Core Hub
|
|
|
|
|
# PostgreSQL leases. Static API-token custody uses the separate
|
|
|
|
|
# workload-kv-read-core-hub-runtime policy and Kubernetes-auth store.
|
|
|
|
|
|
|
|
|
|
path "database/creds/core-hub-runtime" {
|
|
|
|
|
capabilities = ["read"]
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
path "database/creds/core-hub-migration" {
|
|
|
|
|
capabilities = ["read"]
|
|
|
|
|
}
|
2026-08-21 17:30:44 +02:00
|
|
|
|
|
|
|
|
path "database/creds/hub-core-runtime" {
|
|
|
|
|
capabilities = ["read"]
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
path "database/creds/hub-core-migration" {
|
|
|
|
|
capabilities = ["read"]
|
|
|
|
|
}
|
