Allow bounded ESO token self-validation and cleanup
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s

Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883
This commit is contained in:
codex 2026-09-05 16:47:26 +02:00
parent 238d261536
commit 9c86983f1a
5 changed files with 29 additions and 2 deletions

View file

@ -49,6 +49,7 @@ openbao:
fields:
- REPOSITORY_RENAME_PREFLIGHT_SECRET
metadata_read: false
token_self_lifecycle: true
policy_name: workload-kv-read-state-hub-rename-preflight
policy_file: openbao/policies/workload-kv-read-state-hub-rename-preflight.hcl
auth: