Storage

Responsibility

Stores runtime workflows, connections, policies, secrets, and configuration.

Inbound Authentication

• bearer-token protected internal APIs
• role header checks for privileged operations

Outbound Authentication

• none by default (state backend only)

Key Config

• storage auth secret (read_token, admin_token)
• PVC backing data paths

Health

• GET /healthz
• GET /readyz