The vault's secret-ask is said to answer the callers its manifest names (issue 774, ADR 0563 §8)
This commit is contained in:
@@ -175,7 +175,8 @@ var defaultSeats = append([]Seat{
|
|||||||
"origin": "issued for a bus account the controller minted for a core or moved module and hands " +
|
"origin": "issued for a bus account the controller minted for a core or moved module and hands " +
|
||||||
"at once (ADR 0374, issue 787); left out for a value given at the terminal"}), nil)},
|
"at once (ADR 0374, issue 787); left out for a value given at the terminal"}), nil)},
|
||||||
{Name: "secret-ask", Optional: true, Description: "Ask the operator for a module's own secret at a desk, " +
|
{Name: "secret-ask", Optional: true, Description: "Ask the operator for a module's own secret at a desk, " +
|
||||||
"from the controller alone: the ask is recorded in the vault's store and bounded before the prompt " +
|
"from the controller or a caller the vault's manifest names, named as the bus proved it (novox/hq ADR " +
|
||||||
|
"0563 §8): the ask is recorded in the vault's store and bounded before the prompt " +
|
||||||
"opens, and what is typed is sealed to a key the vault made for the call and opens there alone.",
|
"opens, and what is typed is sealed to a key the vault made for the call and opens there alone.",
|
||||||
Input: schema(vaultIntake(map[string]string{"node": "the machine the secret is for",
|
Input: schema(vaultIntake(map[string]string{"node": "the machine the secret is for",
|
||||||
"module": "the module", "name": "the secret's name in the module",
|
"module": "the module", "name": "the secret's name in the module",
|
||||||
|
|||||||
Reference in New Issue
Block a user