Prepare bounded Kubernetes authentication recovery for three ESO lanes
Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883
This commit is contained in:
parent
5d6d8724b4
commit
bd2e6e86b8
11 changed files with 372 additions and 37 deletions
29
openbao/eso-auth-recovery/lanes.json
Normal file
29
openbao/eso-auth-recovery/lanes.json
Normal file
|
|
@ -0,0 +1,29 @@
|
|||
[
|
||||
{
|
||||
"namespace": "forgejo",
|
||||
"name": "forgejo-mailer",
|
||||
"store": "openbao-forgejo",
|
||||
"service_account": "forgejo-mailer-eso",
|
||||
"kv_path": "platform/data/workloads/forgejo/forgejo-mailer",
|
||||
"policy": "workload-kv-read-forgejo-mailer-eso",
|
||||
"role": "forgejo-mailer-eso"
|
||||
},
|
||||
{
|
||||
"namespace": "reuse",
|
||||
"name": "reuse-surface-runtime",
|
||||
"store": "openbao-reuse",
|
||||
"service_account": "reuse-surface-eso",
|
||||
"kv_path": "platform/data/workloads/reuse/reuse-surface/runtime-secrets",
|
||||
"policy": "workload-kv-read-reuse-surface-runtime-eso",
|
||||
"role": "reuse-surface-runtime-eso"
|
||||
},
|
||||
{
|
||||
"namespace": "target-revenue",
|
||||
"name": "target-revenue-runtime",
|
||||
"store": "openbao-target-revenue",
|
||||
"service_account": "target-revenue-eso",
|
||||
"kv_path": "platform/data/workloads/target-revenue/runtime-secrets",
|
||||
"policy": "workload-kv-read-target-revenue-runtime-eso",
|
||||
"role": "target-revenue-runtime-eso"
|
||||
}
|
||||
]
|
||||
Loading…
Add table
Add a link
Reference in a new issue