coulomb/railiance-platform
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Add OpenBao/ESO lane for target-revenue on railiance01
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details

Browse source 
ClusterSecretStore openbao-target-revenue and read policies for
platform/workloads/target-revenue/runtime-secrets (WP-0011).
This commit is contained in:
codex 2026-08-05 17:56:39 +02:00
parent 2cb3a24d6d
commit 79387f1350
3 changed files with 46 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

9
openbao/policies/external-secrets-target-revenue.hcl Normal file
View file

@ -0,0 +1,9 @@
# ESO policy for the target-revenue namespace (WP-0011).
path "platform/data/workloads/target-revenue/*" {
capabilities = ["read"]
}
path "platform/metadata/workloads/target-revenue/*" {
capabilities = ["read", "list"]
}

9
openbao/policies/workload-kv-read-target-revenue-runtime.hcl Normal file
View file

@ -0,0 +1,9 @@
# Read-only policy for Target Revenue Trust Service runtime secrets (WP-0011).
path "platform/data/workloads/target-revenue/runtime-secrets" {
capabilities = ["read"]
}
path "platform/metadata/workloads/target-revenue/runtime-secrets" {
capabilities = ["read"]
}