feat(auth): add first-party acceptance harness

2026-09-01 23:13:15 +03:00
parent 750c87c926
commit 81ce8dfdb2
17 changed files with 356 additions and 10 deletions
@@ -18,6 +18,7 @@ import (

 const (
 	ControlPlaneServiceTokenID = "control_plane_service_token"
+	AcceptanceHarnessServiceTokenID = "acceptance_harness_service_token"
 	MachineCredentialOwner     = "platform.secrets.local-control-plane"
 )

@@ -127,6 +128,10 @@ func ControlPlaneServiceTokenSpec() MachineCredentialSpec {
 	}
 }

+func AcceptanceHarnessServiceTokenSpec() MachineCredentialSpec {
+	return MachineCredentialSpec{ID: AcceptanceHarnessServiceTokenID, Kind: MachineCredentialServiceToken, Purpose: secretcontracts.SecretPurposeServiceAuthentication, Consumers: []secretcontracts.RuntimeConsumer{secretcontracts.RuntimeConsumerCore}, Bytes: 48}
+}
+
 func (s *LocalMachineCredentialStore) Ensure(spec MachineCredentialSpec) (MachineCredentialResult, error) {
 	if err := validateMachineCredentialSpec(spec); err != nil {
 		return MachineCredentialResult{}, err