coulomb/railiance-platform
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Prepare bounded Kubernetes authentication recovery for three ESO lanes

Browse source 
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883
This commit is contained in:
codex 2026-09-05 18:38:19 +02:00
parent 5d6d8724b4
commit bd2e6e86b8
11 changed files with 372 additions and 37 deletions
Download patch file Download diff file Expand all files Collapse all files

11
openbao/policies/workload-kv-read-forgejo-mailer-eso.hcl Normal file
View file

@ -0,0 +1,11 @@
path "platform/data/workloads/forgejo/forgejo-mailer" {
capabilities = ["read"]
}
path "auth/token/lookup-self" {
capabilities = ["read"]
}
path "auth/token/revoke-self" {
capabilities = ["update"]
}

11
openbao/policies/workload-kv-read-reuse-surface-runtime-eso.hcl Normal file
View file

@ -0,0 +1,11 @@
path "platform/data/workloads/reuse/reuse-surface/runtime-secrets" {
capabilities = ["read"]
}
path "auth/token/lookup-self" {
capabilities = ["read"]
}
path "auth/token/revoke-self" {
capabilities = ["update"]
}

11
openbao/policies/workload-kv-read-target-revenue-runtime-eso.hcl Normal file
View file

@ -0,0 +1,11 @@
path "platform/data/workloads/target-revenue/runtime-secrets" {
capabilities = ["read"]
}
path "auth/token/lookup-self" {
capabilities = ["read"]
}
path "auth/token/revoke-self" {
capabilities = ["update"]
}