apiVersion: railiance.fabric/v1alpha1
kind: DependencyDeclaration
metadata:
  id: flex-auth.api.needs-runtime-secrets
  name: flex-auth runtime secrets dependency
  owner: flex-auth
  repo: flex-auth
  domain: railiance
  source_links:
    - label: flex-auth deployment values
      path: deploy/values.yaml
spec:
  lifecycle: active
  environments: [dev, staging, prod]
  consumer_service_id: flex-auth.api
  requires:
    capability_type: runtime-secrets
  interface:
    type: openbao-kv-v2-mount
    version_constraint: ">=v1 <v2"
  auth:
    method: kubernetes_service_account
    audience: openbao
  criticality: critical
  data_classification: secret
  fallback:
    mode: none
    description: flex-auth cannot start without runtime secrets.
  compatibility:
    requires:
      - openbao-kv-v2-mount v1