Add credential approval workflow plan
This commit is contained in:
@@ -404,6 +404,10 @@ platform/operators/<purpose>
|
||||
The template policy for workload KV reads is
|
||||
`openbao/policies/workload-kv-read-template.hcl`.
|
||||
|
||||
Concrete workload access lanes used by ops-warden and similar front doors are
|
||||
tracked in `docs/workload-kv-access-lanes.md`. These docs carry non-secret
|
||||
path, field, policy, auth-role, and verification pointers only.
|
||||
|
||||
## Backup, Restore, Audit, And Monitoring
|
||||
|
||||
Before any live application secrets move into OpenBao:
|
||||
|
||||
Reference in New Issue
Block a user