II.
Topic overview
Reference · livetopic:krate-agent-secret-grant
Krate Agent Secret Grant overview
Explicit secret access grant for an agent. Rather than giving agents broad secret access via RBAC, Krate requires per-secret grants that name the specific K8s Secret and keys the agent may read. Grants are audited and can be time-bounded, expiring after a configurable TTL.
Attributes
displayName
Krate Agent Secret Grant
description
Explicit secret access grant for an agent. Rather than giving agents
broad secret access via RBAC, Krate requires per-secret grants that
name the specific K8s Secret and keys the agent may read. Grants
are audited and can be time-bounded, expiring after a configurable
TTL.
Outgoing edges
applies_to3
- domain:platform-engineering·DomainPlatform Engineering
- domain:devops·DomainDevOps
- skill-area:container-security·SkillArea
related_to1
- topic:krate-agent-config-grant·TopicKrate Agent Config Grant
requires1
- topic:krate-agent-service-account·TopicKrate Agent Service Account
Incoming edges
related_to2
- topic:krate-agent-service-account·TopicKrate Agent Service Account
- topic:krate-agent-config-grant·TopicKrate Agent Config Grant