rock 20513c8b3b iam: add memory scope, service accounts, manual provisioning ...

- Add 'memory' scope property mapping (memory_projects, memory_visibility, memory_role)
- Add capability groups: llm-users, memory-users, memory-writers
- Add service account provisioning for portfolio-agent, memory-agent
- Fix sops-secrets kustomization (generatorOptions)
- Add RoleBindings for portfolio, poimen, dashboard namespaces
- Remove PostSync hook - IAM provisioning is now manual-only

2026-09-03 18:07:22 -07:00

..

apps

messaging: remove queue-crd/management-service (moved to kmsvc-manage)

2026-09-03 08:28:38 -07:00

projects

appproject: allow argo-helm repo for image-updater

2026-09-02 20:32:28 -07:00

root

messaging: remove queue-crd/management-service (moved to kmsvc-manage)

2026-09-03 08:28:38 -07:00

secrets

iam: add memory scope, service accounts, manual provisioning

2026-09-03 18:07:22 -07:00