railiance-platform/openbao/policies/workload-kv-read-core-hub-forgejo-source.hcl
codex 401765f184
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
CUST-WP-0075: dedicated core-hub Forgejo read identity CCR draft
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 3775@bnt-lap001
Assistant-Session: cfacb6a5-ad5b-4f79-ac67-053e3b0d34a3
2026-10-03 08:27:56 +02:00

9 lines
336 B
HCL

# CCR-2026-0031 (proposed). External Secrets reader for the dedicated Core Hub
# Forgejo read:repository token. Not applied until the CCR is approved.
path "platform/data/workloads/core-hub/forgejo-source-read" {
capabilities = ["read"]
}
path "platform/metadata/workloads/core-hub/forgejo-source-read" {
capabilities = ["read"]
}