cybermaggedon 666af1c4b3 feat(iam): allow bootstrap mode and token to be sourced from env vars (#851) ... Adds an environment-variable fallback for the iam-svc bootstrap configuration so the token can be injected from a Kubernetes Secret (or any equivalent secret store) without ever appearing in the processor-group YAML — which is typically version-controlled. Resolution order is fixed and per-setting: bootstrap_mode = params["bootstrap_mode"] or $IAM_BOOTSTRAP_MODE bootstrap_token = params["bootstrap_token"] or $IAM_BOOTSTRAP_TOKEN If neither source supplies a value, the service refuses to start with a clear message naming both options. The two settings are resolved independently, which lets operators commit the mode in YAML (it is not a secret) while pulling the token from a Secret-backed ``IAM_BOOTSTRAP_TOKEN`` env var. Validation invariants are unchanged: * mode must be 'token' or 'bootstrap' * mode='token' requires a token (from any source) * mode='bootstrap' must NOT have a token (ambiguous intent) There is no permissive fallback — the service fails closed in every branch where configuration is incomplete. docs/tech-specs/iam-protocol.md gains a 'Configuration sources' subsection under 'Bootstrap modes' that documents the precedence table and the K8s injection pattern. The 'Bootstrap-token lifecycle' step about removing the token after rotation now applies to whichever source was used (Secret, env var, or YAML field).		2026-04-28 15:00:33 +01:00
..
ar	Structure the tech specs directory (#836)	2026-04-21 16:06:41 +01:00
es	Structure the tech specs directory (#836)	2026-04-21 16:06:41 +01:00
he	Structure the tech specs directory (#836)	2026-04-21 16:06:41 +01:00
hi	Structure the tech specs directory (#836)	2026-04-21 16:06:41 +01:00
pt	Structure the tech specs directory (#836)	2026-04-21 16:06:41 +01:00
ru	Structure the tech specs directory (#836)	2026-04-21 16:06:41 +01:00
sw	Structure the tech specs directory (#836)	2026-04-21 16:06:41 +01:00
tr	Structure the tech specs directory (#836)	2026-04-21 16:06:41 +01:00
zh-cn	Structure the tech specs directory (#836)	2026-04-21 16:06:41 +01:00
__TEMPLATE.md	Feat: TrustGraph i18n & Documentation Translation Updates (#781)	2026-04-14 12:08:32 +01:00
active-flow-key-restructure.md	Flow service lifecycle management (#822)	2026-04-16 17:19:39 +01:00
agent-explainability.md	Feat: TrustGraph i18n & Documentation Translation Updates (#781)	2026-04-14 12:08:32 +01:00
agent-orchestration.md	Feat: TrustGraph i18n & Documentation Translation Updates (#781)	2026-04-14 12:08:32 +01:00
architecture-principles.md	Feat: TrustGraph i18n & Documentation Translation Updates (#781)	2026-04-14 12:08:32 +01:00
bootstrap.md	feat: pluggable bootstrap framework with ordered initialisers (#847)	2026-04-22 18:03:46 +01:00
capabilities.md	feat: IAM service, gateway auth middleware, capability model, and CLIs (#849)	2026-04-24 17:29:10 +01:00
cassandra-consolidation.md	Feat: TrustGraph i18n & Documentation Translation Updates (#781)	2026-04-14 12:08:32 +01:00
cassandra-performance-refactor.md	Feat: TrustGraph i18n & Documentation Translation Updates (#781)	2026-04-14 12:08:32 +01:00
collection-management.md	Feat: TrustGraph i18n & Documentation Translation Updates (#781)	2026-04-14 12:08:32 +01:00
config-push-poke.md	Feat: TrustGraph i18n & Documentation Translation Updates (#781)	2026-04-14 12:08:32 +01:00
data-ownership-model.md	feat: workspace-based multi-tenancy, replacing user as tenancy axis (#840)	2026-04-21 23:23:01 +01:00
document-embeddings-chunk-id.md	Feat: TrustGraph i18n & Documentation Translation Updates (#781)	2026-04-14 12:08:32 +01:00
embeddings-batch-processing.md	Feat: TrustGraph i18n & Documentation Translation Updates (#781)	2026-04-14 12:08:32 +01:00
entity-centric-graph.md	Feat: TrustGraph i18n & Documentation Translation Updates (#781)	2026-04-14 12:08:32 +01:00
explainability-cli.md	Feat: TrustGraph i18n & Documentation Translation Updates (#781)	2026-04-14 12:08:32 +01:00
extraction-flows.md	Feat: TrustGraph i18n & Documentation Translation Updates (#781)	2026-04-14 12:08:32 +01:00
extraction-provenance-subgraph.md	Feat: TrustGraph i18n & Documentation Translation Updates (#781)	2026-04-14 12:08:32 +01:00
extraction-time-provenance.md	Feat: TrustGraph i18n & Documentation Translation Updates (#781)	2026-04-14 12:08:32 +01:00
flow-class-definition.md	feat: workspace-based multi-tenancy, replacing user as tenancy axis (#840)	2026-04-21 23:23:01 +01:00
flow-configurable-parameters.md	Feat: TrustGraph i18n & Documentation Translation Updates (#781)	2026-04-14 12:08:32 +01:00
flow-service-queue-lifecycle.md	Flow service lifecycle management (#822)	2026-04-16 17:19:39 +01:00
graph-contexts.md	Feat: TrustGraph i18n & Documentation Translation Updates (#781)	2026-04-14 12:08:32 +01:00
graphql-query.md	Feat: TrustGraph i18n & Documentation Translation Updates (#781)	2026-04-14 12:08:32 +01:00
graphrag-performance-optimization.md	Feat: TrustGraph i18n & Documentation Translation Updates (#781)	2026-04-14 12:08:32 +01:00
iam-protocol.md	feat(iam): allow bootstrap mode and token to be sourced from env vars (#851)	2026-04-28 15:00:33 +01:00
iam.md	feat: IAM service, gateway auth middleware, capability model, and CLIs (#849)	2026-04-24 17:29:10 +01:00
import-export-graceful-shutdown.md	Feat: TrustGraph i18n & Documentation Translation Updates (#781)	2026-04-14 12:08:32 +01:00
jsonl-prompt-output.md	Feat: TrustGraph i18n & Documentation Translation Updates (#781)	2026-04-14 12:08:32 +01:00
kafka-backend.md	Add Kafka pub/sub backend (#830)	2026-04-18 11:18:34 +01:00
large-document-loading.md	Feat: TrustGraph i18n & Documentation Translation Updates (#781)	2026-04-14 12:08:32 +01:00
logging-strategy.md	Feat: TrustGraph i18n & Documentation Translation Updates (#781)	2026-04-14 12:08:32 +01:00
mcp-tool-arguments.md	Feat: TrustGraph i18n & Documentation Translation Updates (#781)	2026-04-14 12:08:32 +01:00
mcp-tool-bearer-token.md	Feat: TrustGraph i18n & Documentation Translation Updates (#781)	2026-04-14 12:08:32 +01:00
minio-to-s3-migration.md	Feat: TrustGraph i18n & Documentation Translation Updates (#781)	2026-04-14 12:08:32 +01:00
more-config-cli.md	Feat: TrustGraph i18n & Documentation Translation Updates (#781)	2026-04-14 12:08:32 +01:00
multi-tenant-support.md	Feat: TrustGraph i18n & Documentation Translation Updates (#781)	2026-04-14 12:08:32 +01:00
neo4j-user-collection-isolation.md	Feat: TrustGraph i18n & Documentation Translation Updates (#781)	2026-04-14 12:08:32 +01:00
ontology-extract-phase-2.md	Feat: TrustGraph i18n & Documentation Translation Updates (#781)	2026-04-14 12:08:32 +01:00
ontology.md	Feat: TrustGraph i18n & Documentation Translation Updates (#781)	2026-04-14 12:08:32 +01:00
ontorag.md	Feat: TrustGraph i18n & Documentation Translation Updates (#781)	2026-04-14 12:08:32 +01:00
openapi-spec.md	Feat: TrustGraph i18n & Documentation Translation Updates (#781)	2026-04-14 12:08:32 +01:00
pubsub-abstraction.md	Feat: TrustGraph i18n & Documentation Translation Updates (#781)	2026-04-14 12:08:32 +01:00
pubsub.md	Feat: TrustGraph i18n & Documentation Translation Updates (#781)	2026-04-14 12:08:32 +01:00
python-api-refactor.md	Feat: TrustGraph i18n & Documentation Translation Updates (#781)	2026-04-14 12:08:32 +01:00
query-time-explainability.md	Feat: TrustGraph i18n & Documentation Translation Updates (#781)	2026-04-14 12:08:32 +01:00
rag-streaming-support.md	Feat: TrustGraph i18n & Documentation Translation Updates (#781)	2026-04-14 12:08:32 +01:00
schema-refactoring-proposal.md	Feat: TrustGraph i18n & Documentation Translation Updates (#781)	2026-04-14 12:08:32 +01:00
sparql-query.md	Feat: TrustGraph i18n & Documentation Translation Updates (#781)	2026-04-14 12:08:32 +01:00
streaming-llm-responses.md	Feat: TrustGraph i18n & Documentation Translation Updates (#781)	2026-04-14 12:08:32 +01:00
structured-data-2.md	Feat: TrustGraph i18n & Documentation Translation Updates (#781)	2026-04-14 12:08:32 +01:00
structured-data-descriptor.md	Feat: TrustGraph i18n & Documentation Translation Updates (#781)	2026-04-14 12:08:32 +01:00
structured-data-schemas.md	Feat: TrustGraph i18n & Documentation Translation Updates (#781)	2026-04-14 12:08:32 +01:00
structured-data.md	Feat: TrustGraph i18n & Documentation Translation Updates (#781)	2026-04-14 12:08:32 +01:00
structured-diag-service.md	Feat: TrustGraph i18n & Documentation Translation Updates (#781)	2026-04-14 12:08:32 +01:00
tool-group.md	Feat: TrustGraph i18n & Documentation Translation Updates (#781)	2026-04-14 12:08:32 +01:00
tool-services.md	Feat: TrustGraph i18n & Documentation Translation Updates (#781)	2026-04-14 12:08:32 +01:00
universal-decoder.md	Feat: TrustGraph i18n & Documentation Translation Updates (#781)	2026-04-14 12:08:32 +01:00
vector-store-lifecycle.md	Feat: TrustGraph i18n & Documentation Translation Updates (#781)	2026-04-14 12:08:32 +01:00