Files
qinglong/deploy/kubernetes/ql3-cluster/operations/security-administration/input-secret.example.yaml
T

16 lines
709 B
YAML

# Example only. Create a private per-dispatch Secret; never commit real values.
apiVersion: v1
kind: Secret
metadata:
name: ql3-security-administration-input
namespace: qinglong3-system
type: Opaque
immutable: true
stringData:
command.json: |
{"schemaVersion":1,"operation":"audit.list","request":{"limit":25,"filter":{"outcome":"allowed"}}}
assertion.jwt: REPLACE_WITH_SHORT_LIVED_MULTI_FACTOR_ASSERTION
keyset.json: REPLACE_WITH_PINNED_SECURITY_ADMINISTRATION_KEYSET
pepper-keyring.json: |
{"schemaVersion":1,"activePepperKeyId":"REPLACE_WITH_ACTIVE_KEY_ID","keys":[{"pepperKeyId":"REPLACE_WITH_ACTIVE_KEY_ID","pepper":"REPLACE_WITH_CANONICAL_32_BYTE_BASE64URL_API_CREDENTIAL_PEPPER"}]}