Implement offline catalog lane scaffold generation
Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a10391-6355-7b41-b0fa-3e14e874f091
This commit is contained in:
parent
6b9b95bc6e
commit
f5b7ff5118
9 changed files with 869 additions and 1 deletions
49
examples/catalog-lane-scaffold/platform-request.yaml
Normal file
49
examples/catalog-lane-scaffold/platform-request.yaml
Normal file
|
|
@ -0,0 +1,49 @@
|
|||
schema_version: 1
|
||||
lane_id: example-workload-kv
|
||||
ccr_id: CCR-2099-9001
|
||||
title: Synthetic exact workload KV read fixture
|
||||
date: '2026-10-04'
|
||||
consumer_repo: example-consumer
|
||||
owner_repo: railiance-platform
|
||||
requester:
|
||||
agent: example-consumer
|
||||
reason: Offline fixture only; no deployed consumer or credential exists
|
||||
review_approvers:
|
||||
- platform-owner
|
||||
- consumer-owner
|
||||
target:
|
||||
domain: infotech
|
||||
tenant: platform
|
||||
workload: example-consumer
|
||||
environment: build
|
||||
purpose: Offline fixture of proposed exact-path metadata
|
||||
openbao:
|
||||
mount: platform
|
||||
kv_path: platform/workloads/example-consumer/config
|
||||
fields:
|
||||
- CLIENT_SECRET
|
||||
policy_name: workload-kv-read-example-consumer
|
||||
auth:
|
||||
mount: kubernetes
|
||||
role: example-consumer-eso
|
||||
audience: openbao
|
||||
service_account_names:
|
||||
- example-consumer-eso
|
||||
service_account_namespaces:
|
||||
- example-consumer
|
||||
ttl: 15m
|
||||
eso:
|
||||
store_name: openbao-example-consumer
|
||||
server: http://openbao.openbao.svc:8200
|
||||
namespace: example-consumer
|
||||
external_secret_name: example-consumer-config
|
||||
secret_name: example-consumer-config
|
||||
refresh_interval: 5m
|
||||
data:
|
||||
- secret_key: client-secret
|
||||
property: CLIENT_SECRET
|
||||
risk:
|
||||
classification: standard
|
||||
notes:
|
||||
- Synthetic prospective lane risk applies to the entire readable path; no actual
|
||||
credentials.
|
||||
15
examples/catalog-lane-scaffold/warden-request.yaml
Normal file
15
examples/catalog-lane-scaffold/warden-request.yaml
Normal file
|
|
@ -0,0 +1,15 @@
|
|||
schema_version: 1
|
||||
lane_id: example-workload-kv
|
||||
title: Synthetic exact workload KV read fixture
|
||||
need_keywords:
|
||||
- synthetic example workload config
|
||||
consumer_repo: example-consumer
|
||||
owner_repo: railiance-platform
|
||||
workload_ref:
|
||||
applicability: applicable
|
||||
unknown_reason: Synthetic fixture has no published deployment identity
|
||||
risk: standard
|
||||
wiki_ref: railiance-platform:docs/catalog-lane-scaffold.md
|
||||
canon_ref: railiance-platform:credential-change-requests/CCR-2099-9001.yaml
|
||||
reviewed: '2026-10-04'
|
||||
platform_request_ref: railiance-platform:examples/catalog-lane-scaffold/platform-request.yaml
|
||||
Loading…
Add table
Add a link
Reference in a new issue