enterprise/flex-auth integration layer

2026-05-04 17:54:52 +02:00
parent e33f296bdb
commit 6cb3b7b172
17 changed files with 1240 additions and 23 deletions
--- a/examples/policy/external-pdp-requests.yaml
+++ b/examples/policy/external-pdp-requests.yaml
@@ -0,0 +1,28 @@
+relationship_request:
+  subject: oidc:https://sso.example.test/realms/netkingdom#user-123
+  relation: reader
+  object_id: document:internal-note
+  namespace: markitect/document
+  context:
+    action: query
+    trust_zone: internal
+    resource_path: examples/policy/private/internal-note.md
+rule_request:
+  subject:
+    id: oidc:https://sso.example.test/realms/netkingdom#user-123
+    roles:
+      - viewer
+    groups:
+      - /markitect/readers
+    assurance:
+      mfa: true
+  action: query
+  object:
+    id: document:internal-note
+    type: document
+    labels:
+      - internal
+    trust_zone: internal
+  context:
+    policy_map_id: markitect-enterprise-policy-map
+    workflow_id: assisted-review-boundary