railiance-platform/openbao/auth/coding-agent-jwt-role.json
codex 5781d34b3b
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
Prepare tenant-zero OpenBao roles and review platform essentials
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a0e324-abce-7e51-bb2b-496f097afdb0
2026-09-27 16:43:32 +02:00

23 lines
546 B
JSON

{
"role_type": "jwt",
"bound_audiences": [
"codex-railiance-platform"
],
"user_claim": "sub",
"bound_claims_type": "string",
"bound_claims": {
"sub": "service:codex:railiance-platform",
"principal_type": "service",
"tenant": "tenant:platform",
"roles": "coding-agent"
},
"token_policies": [
"agent-high-risk-boundary",
"workload-kv-read-issue-core-runtime"
],
"token_ttl": "15m",
"token_max_ttl": "15m",
"token_num_uses": 8,
"token_no_default_policy": true,
"verbose_oidc_logging": false
}