- Registration goes through maker and checker approval, with no deploy (ADR-0013).
- Parmana sends each approved action to the endpoint as a signed release. The endpoint verifies the signature and audience. It needs no shared secret.
- If the endpoint is reached through a private certificate authority, the server must trust that authority. Set the variables described in the environment reference.
Self hosted
Connect a system
How a self hosted deployment releases authorized actions to an external connector. Parmana ships no built-in connectors.
Parmana ships no built-in connectors, so a self hosted deployment needs no connector variables to start. A system is connected by registering an external connector: a capability, the HTTPS endpoint that serves it, and the policy that governs it.