Files
net-kingdom/examples/security-bootstrap/king-credential-metadata.example.json

45 lines
1.5 KiB
JSON

{
"bootstrap_mode": "custody",
"custodian_age_public_key": "",
"custodian_age_public_key_confirmed": false,
"custodian_age_private_key_reference": "",
"custodian_age_private_key_confirmed": false,
"credential_label": "platform-root",
"identity_account_home": "lldap",
"identity_account_reference": "",
"identity_account_created": false,
"identity_group_reference": "net-kingdom-admins",
"identity_group_confirmed": false,
"setup_operator": "tegwick",
"notification_contact": "bernd.worsch@gmail.com",
"storage_classes": [
"password-safe",
"offline-packet"
],
"password_safe_confirmed": false,
"mfa_class": "totp",
"mfa_enrolled_confirmed": false,
"mfa_enrollment_source": "deferred",
"mfa_enrollment_reference": "",
"recovery_confirmed": false,
"custody_packet_prepared": false,
"no_secret_capture_confirmed": false,
"king_credential_ready": false,
"custody_mode": "",
"custody_mode_approved": false,
"custody_approved_at": "",
"custody_approved_by": "",
"approval_scope": "",
"oidc_login_verified": false,
"metadata_updated_at": "",
"progress_scope": "",
"openbao_preflight_passed": false,
"openbao_initialized": false,
"root_token_disposition": "",
"restore_drill_passed": false,
"cleanup_complete": false,
"platform_reopened": false,
"review_date": "",
"notes": "Non-secret metadata only. Do not store passwords, OTP seeds, recovery codes, private keys, OpenBao root tokens, or unseal shares here."
}