Implement offline catalog lane scaffold generation
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s

Assistant: codex
Assistant-Model: gpt-6.1-sol
Assistant-Session: 01a10391-6355-7b41-b0fa-3e14e874f091
This commit is contained in:
codex 2026-10-04 02:24:40 +02:00
parent 6b9b95bc6e
commit f5b7ff5118
9 changed files with 869 additions and 1 deletions

View file

@ -0,0 +1,49 @@
schema_version: 1
lane_id: example-workload-kv
ccr_id: CCR-2099-9001
title: Synthetic exact workload KV read fixture
date: '2026-10-04'
consumer_repo: example-consumer
owner_repo: railiance-platform
requester:
agent: example-consumer
reason: Offline fixture only; no deployed consumer or credential exists
review_approvers:
- platform-owner
- consumer-owner
target:
domain: infotech
tenant: platform
workload: example-consumer
environment: build
purpose: Offline fixture of proposed exact-path metadata
openbao:
mount: platform
kv_path: platform/workloads/example-consumer/config
fields:
- CLIENT_SECRET
policy_name: workload-kv-read-example-consumer
auth:
mount: kubernetes
role: example-consumer-eso
audience: openbao
service_account_names:
- example-consumer-eso
service_account_namespaces:
- example-consumer
ttl: 15m
eso:
store_name: openbao-example-consumer
server: http://openbao.openbao.svc:8200
namespace: example-consumer
external_secret_name: example-consumer-config
secret_name: example-consumer-config
refresh_interval: 5m
data:
- secret_key: client-secret
property: CLIENT_SECRET
risk:
classification: standard
notes:
- Synthetic prospective lane risk applies to the entire readable path; no actual
credentials.

View file

@ -0,0 +1,15 @@
schema_version: 1
lane_id: example-workload-kv
title: Synthetic exact workload KV read fixture
need_keywords:
- synthetic example workload config
consumer_repo: example-consumer
owner_repo: railiance-platform
workload_ref:
applicability: applicable
unknown_reason: Synthetic fixture has no published deployment identity
risk: standard
wiki_ref: railiance-platform:docs/catalog-lane-scaffold.md
canon_ref: railiance-platform:credential-change-requests/CCR-2099-9001.yaml
reviewed: '2026-10-04'
platform_request_ref: railiance-platform:examples/catalog-lane-scaffold/platform-request.yaml