Add exact audit E2 probe pod
Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a0260c-4067-7052-9647-ad000d576e38
This commit is contained in:
parent
6ba6929b8e
commit
ce5bb78990
2 changed files with 48 additions and 1 deletions
|
|
@ -16,7 +16,7 @@
|
|||
"control_plane_scope": [
|
||||
"GET apps/v1 deployment audit-core/audit-core for target revision only",
|
||||
"GET v1 service audit-core/audit-core for target identity only",
|
||||
"CREATE/GET/DELETE v1 pod user-engine/whitehat-e2-audit only",
|
||||
"CREATE/GET/EXEC/DELETE v1 pod user-engine/whitehat-e2-audit only; EXEC may stream runners/audit_core_e2.py to python3 stdin and invoke no other program",
|
||||
"mount but never GET v1 secret user-engine/whitehat-e2-audit-credentials provisioned by the custody owner",
|
||||
"GET pod log user-engine/whitehat-e2-audit only"
|
||||
],
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue