Add credential approval workflow plan

This commit is contained in:
2026-06-27 22:48:24 +02:00
parent 9d42c73833
commit 85a4278a55
8 changed files with 1103 additions and 0 deletions

View File

@@ -404,6 +404,10 @@ platform/operators/<purpose>
The template policy for workload KV reads is
`openbao/policies/workload-kv-read-template.hcl`.
Concrete workload access lanes used by ops-warden and similar front doors are
tracked in `docs/workload-kv-access-lanes.md`. These docs carry non-secret
path, field, policy, auth-role, and verification pointers only.
## Backup, Restore, Audit, And Monitoring
Before any live application secrets move into OpenBao: