unkin/argocd-apps
3
0
Fork 0
Code Issues 7 Pull Requests 6 Actions Packages Projects Releases Wiki Activity

Enable Vault OIDC auth on artifactapi config writes #552

Merged
benvin merged 1 commits from benvin/artifactapi-oidc into main 2026-10-16 22:23:55 +11:00
Conversation 1 Commits 1 Files Changed 4
+6 -4
unkin-agent commented 2026-10-16 22:20:07 +11:00
Member
Copy Link
Copy Source

artifactapi v3.14.0 can require a Vault-issued bearer JWT for writes to /api/v2/remotes and /api/v2/virtuals, so config changes stop being open to anything in-cluster.

  • bump artifactapi and artifactapi-ui images to v3.14.0
  • set ARTIFACTAPI_OIDC_ISSUER to the Vault identity OIDC issuer and ARTIFACTAPI_OIDC_AUDIENCE to artifactapi

Requires terraform-artifactapi #64 merged first.

artifactapi v3.14.0 can require a Vault-issued bearer JWT for writes to /api/v2/remotes and /api/v2/virtuals, so config changes stop being open to anything in-cluster. - bump artifactapi and artifactapi-ui images to v3.14.0 - set ARTIFACTAPI_OIDC_ISSUER to the Vault identity OIDC issuer and ARTIFACTAPI_OIDC_AUDIENCE to artifactapi Requires terraform-artifactapi #64 merged first.
unkin-agent added 1 commit 2026-10-16 22:20:08 +11:00
Enable Vault OIDC auth on artifactapi config writes
ci/woodpecker/pr/pre-commit Pipeline was successful
Details
ci/woodpecker/pr/kubeconform Pipeline was successful
Details
09417935ca
unkin-agent commented 2026-10-16 22:20:53 +11:00
Author
Member
Copy Link
Copy Source

No findings.

No findings.
benvin merged commit 8a1d544393 into main 2026-10-16 22:23:55 +11:00
benvin deleted branch benvin/artifactapi-oidc 2026-10-16 22:23:55 +11:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
benvin (BenVincent) unkin-agent (Unkin Agent) unkinben (Ben Vincent)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: unkin/argocd-apps#552
Delete Branch "benvin/artifactapi-oidc"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?