feat: prepare core hub platform onboarding
This commit is contained in:
parent
f19f89ae58
commit
ac69f90300
8 changed files with 473 additions and 0 deletions
|
|
@ -22,6 +22,12 @@ path "platform/data/workloads/activity-core/llm-connect/llm-connect-provider-sec
|
|||
path "platform/metadata/workloads/activity-core/llm-connect/llm-connect-provider-secrets" {
|
||||
capabilities = ["read"]
|
||||
}
|
||||
path "platform/data/workloads/core-hub/runtime" {
|
||||
capabilities = ["deny"]
|
||||
}
|
||||
path "platform/metadata/workloads/core-hub/runtime" {
|
||||
capabilities = ["read"]
|
||||
}
|
||||
|
||||
# --- tenant high-risk (WARDEN-WP-0028) ---
|
||||
path "tenants/data/binky/company-email/imap" {
|
||||
|
|
|
|||
7
openbao/policies/workload-kv-read-core-hub-runtime.hcl
Normal file
7
openbao/policies/workload-kv-read-core-hub-runtime.hcl
Normal file
|
|
@ -0,0 +1,7 @@
|
|||
path "platform/data/workloads/core-hub/runtime" {
|
||||
capabilities = ["read"]
|
||||
}
|
||||
|
||||
path "platform/metadata/workloads/core-hub/runtime" {
|
||||
capabilities = ["read"]
|
||||
}
|
||||
Loading…
Add table
Add a link
Reference in a new issue