28 lines
937 B
JSON
28 lines
937 B
JSON
{
|
|
"command": [
|
|
"python3",
|
|
"tools/check-keycape-recovery-selector.py",
|
|
"--selector",
|
|
"docs/keycape-recovery-selector.json",
|
|
"--source-sha256",
|
|
"sha256:c0ade429edf452ad17f05d690b7ebef091db7f1a42b5ac350f1e40955c8586c0"
|
|
],
|
|
"exit_code": 0,
|
|
"result": {
|
|
"schema": "secrets-engine.recovery-selector-preflight.v1",
|
|
"status": "source_selector_matches_not_native_assent",
|
|
"source_sha256": "sha256:c0ade429edf452ad17f05d690b7ebef091db7f1a42b5ac350f1e40955c8586c0",
|
|
"consumer": {
|
|
"client_id": "secrets-engine-openbao",
|
|
"secret_env": "KEYCAPE_SECRETS_ENGINE_OPENBAO_CLIENT_SECRET",
|
|
"audience": "secrets-engine-openbao",
|
|
"scope": "openbao:login",
|
|
"subject": "service:secrets-engine",
|
|
"tenant": "tenant:platform",
|
|
"roles": "secrets-engine",
|
|
"deny_scope": "openbao:admin"
|
|
},
|
|
"credential_source_exercised": false,
|
|
"network_contacted": false
|
|
}
|
|
}
|