coulomb/railiance-platform
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Establish attended telemetry Grafana custody and record private activation
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details

Browse source 
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883
This commit is contained in:
codex 2026-09-06 22:36:09 +02:00
parent 4c320cf053
commit 92a0f5ed59
7 changed files with 263 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

8
openbao/policies/agent-high-risk-boundary.hcl
View file

@ -115,3 +115,11 @@ path "platform/data/workloads/state-hub/repository-rename-preflight" {
path "platform/metadata/workloads/state-hub/repository-rename-preflight" {
capabilities = ["deny"]
}
# Grafana administrator custody: attended operator and ESO only.
path "platform/data/workloads/telemetry/grafana-admin" {
capabilities = ["deny"]
}
path "platform/metadata/workloads/telemetry/grafana-admin" {
capabilities = ["deny"]
}