railiance-platform/openbao/policies/keycape-factor-renewer.hcl
codex 2e2c31d237
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 2s
KeyCape factor custody acceptance / acceptance (push) Successful in 7s
Establish scoped KeyCape factor custody and verified automatic renewal
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a092fe-13b1-7f12-ac74-7d258af4d79c
2026-09-13 16:25:33 +02:00

11 lines
337 B
HCL

# Dedicated renewable service password read and JWT-only publish.
path "platform/data/workloads/net-kingdom/keycape-factor-issuer" {
capabilities = ["read"]
}
path "platform/data/workloads/net-kingdom/keycape-factor-read" {
capabilities = ["read", "create", "update"]
}
path "auth/token/revoke-self" {
capabilities = ["update"]
}