103 lines
3.8 KiB
JSON
103 lines
3.8 KiB
JSON
{
|
|
"tenant": "tenant:platform",
|
|
"subject": {
|
|
"id": "secrets-engine",
|
|
"type": "service",
|
|
"tenant": "tenant:platform"
|
|
},
|
|
"action": "execute-ccr",
|
|
"resource": {
|
|
"id": "catalog:synthetic",
|
|
"type": "secret-catalog-lane",
|
|
"system": "secrets-engine",
|
|
"attributes": {
|
|
"stage": "prod"
|
|
},
|
|
"tenant": "tenant:platform"
|
|
},
|
|
"context": {
|
|
"execution_contract": {
|
|
"backend_budget": {
|
|
"ttl_seconds": 30,
|
|
"uses": 12
|
|
},
|
|
"backend_origin": "http://127.0.0.1:18200",
|
|
"catalog_sha256": "sha256:290e55b2258d66980f9443ba7d1436adfc77b8814bd161004d5af2ba272bc9cc",
|
|
"ccr_id": "CCR-2099-0001",
|
|
"ccr_immutable_sha256": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
|
|
"cluster_uid": "synthetic-not-native",
|
|
"contract_version": "SECRETS-EXEC-20261011-v1",
|
|
"execution_actor": "service:secrets-engine",
|
|
"execution_grant_ccr_id": "CCR-2099-0002",
|
|
"expected_after": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
|
|
"expected_before": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
|
|
"grant_immutable_sha256": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
|
|
"operation": "metadata-apply-ccr",
|
|
"operation_deadline": "2026-10-16T14:59:50+00:00",
|
|
"operation_id": "cbfbced0-09d5-48c8-a1e7-a2ea4dc69153",
|
|
"operations": [
|
|
{
|
|
"method": "GET",
|
|
"path": "sys/policies/acl/synthetic",
|
|
"payload_sha256": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
|
|
},
|
|
{
|
|
"method": "PUT",
|
|
"path": "sys/policies/acl/synthetic",
|
|
"payload_sha256": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
|
|
},
|
|
{
|
|
"method": "GET",
|
|
"path": "sys/policies/acl/synthetic",
|
|
"payload_sha256": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
|
|
},
|
|
{
|
|
"method": "GET",
|
|
"path": "auth/synthetic/role/synthetic",
|
|
"payload_sha256": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
|
|
},
|
|
{
|
|
"method": "PUT",
|
|
"path": "auth/synthetic/role/synthetic",
|
|
"payload_sha256": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
|
|
},
|
|
{
|
|
"method": "GET",
|
|
"path": "auth/synthetic/role/synthetic",
|
|
"payload_sha256": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
|
|
}
|
|
],
|
|
"source_bundle": {
|
|
"engine_dispatcher": {
|
|
"path": "/synthetic/engine_dispatcher.py",
|
|
"sha256": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
|
|
},
|
|
"platform_mediator": {
|
|
"path": "/synthetic/platform_mediator.py",
|
|
"sha256": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
|
|
},
|
|
"policy_auth": {
|
|
"path": "/synthetic/policy_auth.py",
|
|
"sha256": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
|
|
},
|
|
"typed_ccr": {
|
|
"path": "/synthetic/typed_ccr.py",
|
|
"sha256": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
|
|
}
|
|
}
|
|
},
|
|
"catalog_target": {
|
|
"lane": "synthetic",
|
|
"stage": "prod"
|
|
},
|
|
"human_control": true,
|
|
"service_actor_binding": {
|
|
"version": "proposed-service-task-caller/v1",
|
|
"transport_principal": "system:serviceaccount:secrets-engine:secrets-engine",
|
|
"subject_id": "secrets-engine",
|
|
"subject_type": "service",
|
|
"tenant": "tenant:platform"
|
|
},
|
|
"purpose": "actual Python App source-only synthetic proof"
|
|
}
|
|
}
|