theta42/theta-suite
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

chore: bump submodules for OpenBao secret integration
Lint / Shellcheck setup.sh (push) Failing after 9s
Details
Lint / Syntax check bootstrap.js (push) Successful in 12s
Details
CI/CD / test-sso-manager (push) Failing after 8s
Details
CI/CD / test-jump-host (push) Failing after 8s
Details
CI/CD / test-proxy (push) Failing after 7s
Details
CI/CD / build-telemetry-agent (push) Failing after 8s
Details
CI/CD / docker-push (push) Has been skipped
Details

Browse Source
This commit is contained in:
William Mantly
2026-08-02 00:38:49 -04:00
parent f3b951b780
commit 35c8a51182
1 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
setup.sh
+4
View File
@@ -775,6 +775,8 @@ info "Configuring OpenBao policies..."
ensure_policy sso-broker <<'HCL' ensure_policy sso-broker <<'HCL'
path "secret/data/sso-manager/conf" { capabilities = ["create", "read", "update", "delete", "list"] } path "secret/data/sso-manager/conf" { capabilities = ["create", "read", "update", "delete", "list"] }
path "secret/metadata/sso-manager/conf" { capabilities = ["list", "read", "delete"] } path "secret/metadata/sso-manager/conf" { capabilities = ["list", "read", "delete"] }
path "secret/data/proxy/conf" { capabilities = ["create", "read", "update", "delete", "list"] }
path "secret/metadata/proxy/conf" { capabilities = ["list", "read", "delete"] }
path "secret/data/users/*" { capabilities = ["create", "read", "update", "delete", "list"] } path "secret/data/users/*" { capabilities = ["create", "read", "update", "delete", "list"] }
path "secret/metadata/users/*" { capabilities = ["list", "read", "delete"] } path "secret/metadata/users/*" { capabilities = ["list", "read", "delete"] }
path "secret/data/apps/*" { capabilities = ["create", "read", "update", "delete", "list"] } path "secret/data/apps/*" { capabilities = ["create", "read", "update", "delete", "list"] }
@@ -798,6 +800,8 @@ HCL
# proxy / jump-host — read only their own boot conf. # proxy / jump-host — read only their own boot conf.
ensure_policy proxy <<'HCL' ensure_policy proxy <<'HCL'
path "secret/data/proxy/conf" { capabilities = ["read"] } path "secret/data/proxy/conf" { capabilities = ["read"] }
path "secret/data/proxy/dns-providers/*" { capabilities = ["create", "read", "update", "delete", "list"] }
path "secret/metadata/proxy/dns-providers/*" { capabilities = ["list", "read", "delete"] }
path "secret/metadata/proxy/conf" { capabilities = ["read", "list"] } path "secret/metadata/proxy/conf" { capabilities = ["read", "list"] }
HCL HCL
ensure_policy jump-host <<'HCL' ensure_policy jump-host <<'HCL'