tegwick
e36694648a
Switch openbao-activity-core ClusterSecretStore to interim coulombcore token auth like forgejo/reuse, broaden the activity-core ESO policy to include the shared issue-core runtime path, and document ESO-managed rotation.
21 lines
No EOL
658 B
HCL
21 lines
No EOL
658 B
HCL
# External Secrets Operator policy for the activity-core namespace.
|
|
#
|
|
# Covers:
|
|
# - llm-connect provider secrets (OPENROUTER_API_KEY)
|
|
# - shared issue-core ingestion key for activity-core IssueSink emission
|
|
|
|
path "platform/data/workloads/activity-core/llm-connect/llm-connect-provider-secrets" {
|
|
capabilities = ["read"]
|
|
}
|
|
|
|
path "platform/metadata/workloads/activity-core/llm-connect/llm-connect-provider-secrets" {
|
|
capabilities = ["read"]
|
|
}
|
|
|
|
path "platform/data/workloads/issue-core/issue-core/issue-core-runtime" {
|
|
capabilities = ["read"]
|
|
}
|
|
|
|
path "platform/metadata/workloads/issue-core/issue-core/issue-core-runtime" {
|
|
capabilities = ["read"]
|
|
} |