apiVersion: railiance.fabric/v1alpha1
kind: CapabilityDeclaration
metadata:
  id: key-cape.iam-profile.issuer
  name: key-cape IAM Profile issuer
  owner: key-cape
  repo: key-cape
  domain: railiance
spec:
  lifecycle: active
  environments: [dev, staging, prod]
  description: Implements IAM Profile claim serving for Railiance workloads.
  capability_type: iam-profile-issuer
  service_id: key-cape.iam-profile
  interface_ids:
    - key-cape.iam-profile.http-api
    - key-cape.iam-profile.oidc-discovery
  criticality: critical
  data_classification: restricted