coulomb/secrets-engine
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Bind platform OpenBao service identity to tenant zero
All checks were successful
CI Smoke / host-smoke (push) Successful in 1s
Details
CI Smoke / container-smoke (push) Successful in 4s
Details

Browse source 
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a0e324-abce-7e51-bb2b-496f097afdb0
This commit is contained in:
tegwick 2026-09-27 16:43:31 +02:00
parent cbe218b26a
commit f0d82908e9
6 changed files with 35 additions and 17 deletions
Download patch file Download diff file Expand all files Collapse all files

7
docs/tenant-alignment.md
View file

@ -1,3 +1,10 @@
> Superseded source finding, 2026-09-27: the operator confirmed that OpenBao
> and its infrastructure service identities belong to `tenant:platform` (tenant
> zero). Coulomb is a workload tenant. The former `service_auth.TENANT` value
> discussed below is historical; source preflight now requires platform and
> rejects Coulomb. Live migration remains SECRETS-WP-0008-T06. See the platform
> owner's `docs/platform-tenant-essentials-review.md` for the cross-repo review.
# Tenant alignment
Answer to the `GLAS-WP-0015` production-dependency handoff question, which asked