Advance RPF-WP-0021 platform onboarding
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s

This commit is contained in:
codex 2026-08-20 23:31:47 +02:00
parent 8caba51801
commit 07ed6217b7
8 changed files with 284 additions and 5 deletions

View file

@ -0,0 +1,11 @@
# Exact-scope parent policy for the renewable ESO token that projects Core Hub
# PostgreSQL leases. Static API-token custody uses the separate
# workload-kv-read-core-hub-runtime policy and Kubernetes-auth store.
path "database/creds/core-hub-runtime" {
capabilities = ["read"]
}
path "database/creds/core-hub-migration" {
capabilities = ["read"]
}