https://alwaldend.com/docs/infra/vault/openspec/specs/x-article-uploader-identity/Recent content in X article uploader identity on AlwaldendHugoenhttps://alwaldend.com/docs/infra/vault/openspec/specs/x-article-uploader-identity/spec/Mon, 01 Jan 0001 00:00:00 +0000https://alwaldend.com/docs/infra/vault/openspec/specs/x-article-uploader-identity/spec/<span id="x-article-uploader-identity"></span><h2 id="purpose">Purpose<a class="td-heading-self-link" href="#purpose" aria-label="Heading self-link"></a></h2><p>Describe the uploader&rsquo;s dedicated Vault identity, component-scoped credential access, and injected OAuth references. These declarations do not establish that a live identity or credential has been provisioned.</p> <h2 id="requirements">Requirements<a class="td-heading-self-link" href="#requirements" aria-label="Heading self-link"></a></h2><h3 id="requirement-dedicated-component-identity">Requirement: Dedicated component identity<a class="td-heading-self-link" href="#requirement-dedicated-component-identity" aria-label="Heading self-link"></a></h3><p>Vault configuration SHALL declare a <code>src_projects_x_article_uploader</code> identity through the existing AppRole backend and reusable identity module, so the uploader authenticates as itself rather than sharing another component&rsquo;s role. Checked-in declarations SHALL contain secret references only.</p>