coulomb/railiance-platform
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1

fix(security): prevent ESO copying source annotations (CUST-WP-0073)
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 4s
Details
KeyCape factor custody acceptance / acceptance (push) Successful in 10s
Details

Browse source 
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a0e7fb-275d-7db0-b1df-39ed943427da
This commit is contained in:
codex 2026-09-28 15:56:50 +02:00
parent c5d65b0b40
commit 80e053988f
7 changed files with 47 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

12
manifests/factory-audit-senders.yaml
View file

@ -37,6 +37,12 @@ spec:
kind: ClusterSecretStore
name: openbao-approval-engine-audit
target:
# Explicit target metadata prevents ESO copying source last-applied annotations.
template:
metadata:
annotations:
railiance.io/credential-change: CCR-2026-0021
railiance.io/admission: approved
name: approval-engine-audit
creationPolicy: Owner
deletionPolicy: Retain
@ -84,6 +90,12 @@ spec:
kind: ClusterSecretStore
name: openbao-informed-decision-audit
target:
# Explicit target metadata prevents ESO copying source last-applied annotations.
template:
metadata:
annotations:
railiance.io/credential-change: CCR-2026-0022
railiance.io/admission: approved
name: informed-decision-audit
creationPolicy: Owner
deletionPolicy: Retain