Worked examples¶
Each example takes one integration from goal to undo: Goal, What you need, The policy snippet, The exchange or command, Verify, Undo. Each page links its recipe. The index is Connect something.
Hostnames and accounts are examples. sluisctl policy render accepts every policy snippet and the chart's values schema accepts every values snippet. Each page names its fixture or test.
| Integration | Example |
|---|---|
| GitHub Actions runners | A GitHub App for each runner tier |
| GitHub Apps | A catalogue App, its key and a job's token |
| Cloudflare | Short-lived R2 credentials, a Cloudflare API token for a CI job |
| OIDC clients | A console with its own sign-in, Envoy Gateway OIDC, oauth2-proxy, an MCP server, a generated client secret |
| AWS | A person's profile, a CI job's role, a workload's role |
The two Cloudflare examples use field and flag names from the Cloudflare STS pull requests, which ship in the next release candidate. Webhook Apps for Argo CD and Kargo have no example yet.