Advance RPF-WP-0021 platform onboarding
This commit is contained in:
parent
8caba51801
commit
07ed6217b7
8 changed files with 284 additions and 5 deletions
11
openbao/policies/external-secrets-core-hub-database.hcl
Normal file
11
openbao/policies/external-secrets-core-hub-database.hcl
Normal file
|
|
@ -0,0 +1,11 @@
|
|||
# Exact-scope parent policy for the renewable ESO token that projects Core Hub
|
||||
# PostgreSQL leases. Static API-token custody uses the separate
|
||||
# workload-kv-read-core-hub-runtime policy and Kubernetes-auth store.
|
||||
|
||||
path "database/creds/core-hub-runtime" {
|
||||
capabilities = ["read"]
|
||||
}
|
||||
|
||||
path "database/creds/core-hub-migration" {
|
||||
capabilities = ["read"]
|
||||
}
|
||||
Loading…
Add table
Add a link
Reference in a new issue