864cc20b96
Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02669-87ee-7a31-b111-edc95a16e0fa
54 lines
1.5 KiB
YAML
54 lines
1.5 KiB
YAML
# Ephemeral, exact-path projection for WH-ENG-20260822-AUDIT-E2-01.
|
|
# Apply only through scripts/audit-core-whitehat-e2-credentials.py during the
|
|
# approved window. No value is present in this file.
|
|
---
|
|
apiVersion: external-secrets.io/v1
|
|
kind: ClusterSecretStore
|
|
metadata:
|
|
name: openbao-whitehat-audit-e2
|
|
labels:
|
|
app.kubernetes.io/part-of: railiance-platform
|
|
railiance-platform/engagement: WH-ENG-20260822-AUDIT-E2-01
|
|
spec:
|
|
provider:
|
|
vault:
|
|
server: http://openbao.openbao.svc:8200
|
|
path: platform
|
|
version: v2
|
|
auth:
|
|
kubernetes:
|
|
mountPath: kubernetes
|
|
role: external-secrets-whitehat-audit-e2
|
|
serviceAccountRef:
|
|
name: external-secrets
|
|
namespace: external-secrets
|
|
conditions:
|
|
- namespaces:
|
|
- whitehat
|
|
---
|
|
apiVersion: external-secrets.io/v1
|
|
kind: ExternalSecret
|
|
metadata:
|
|
name: whitehat-e2-audit-credentials
|
|
namespace: whitehat
|
|
labels:
|
|
app.kubernetes.io/part-of: railiance-platform
|
|
railiance-platform/engagement: WH-ENG-20260822-AUDIT-E2-01
|
|
spec:
|
|
refreshInterval: 1m
|
|
secretStoreRef:
|
|
kind: ClusterSecretStore
|
|
name: openbao-whitehat-audit-e2
|
|
target:
|
|
name: whitehat-e2-audit-credentials
|
|
creationPolicy: Owner
|
|
deletionPolicy: Delete
|
|
data:
|
|
- secretKey: token-a
|
|
remoteRef:
|
|
key: engagements/WH-ENG-20260822-AUDIT-E2-01/audit-core/token-a
|
|
property: token
|
|
- secretKey: token-b
|
|
remoteRef:
|
|
key: engagements/WH-ENG-20260822-AUDIT-E2-01/audit-core/token-b
|
|
property: token
|