2769258631
Workload KV path and ESO drafts for Secret platform-pg-backup-s3. Founder mints the project-scoped Scaleway application; values stay out of git.
11 lines
375 B
HCL
11 lines
375 B
HCL
# Least-privilege read of the Barman runtime key for platform-pg.
|
|
# ESO (or the later Kubernetes auth role) is the only in-cluster reader.
|
|
# Values never belong in Git.
|
|
|
|
path "platform/data/workloads/railiance/backup/platform-pg-backup-s3" {
|
|
capabilities = ["read"]
|
|
}
|
|
|
|
path "platform/metadata/workloads/railiance/backup/platform-pg-backup-s3" {
|
|
capabilities = ["read"]
|
|
}
|