Require tokens for artifactapi uploads #574

Merged
benvin merged 1 commits from benvin/artifactapi-auth-uploads into main 2026-10-26 20:33:29 +11:00
Member

Woodpecker uploaders now mint Vault OIDC tokens, so anonymous local-repo writes can be rejected.

  • set ARTIFACTAPI_AUTH_UPLOADS: "true" in the artifactapi api-env configmap

Merge after unkin/vault-plugin-secrets-litellm#6.

Woodpecker uploaders now mint Vault OIDC tokens, so anonymous local-repo writes can be rejected. - set `ARTIFACTAPI_AUTH_UPLOADS: "true"` in the artifactapi `api-env` configmap Merge after unkin/vault-plugin-secrets-litellm#6.
unkin-agent added 1 commit 2026-10-26 00:59:45 +11:00
Require tokens for artifactapi uploads
ci/woodpecker/pr/pre-commit Pipeline was successful
ci/woodpecker/pr/kubeconform Pipeline was successful
99551420ea
benvin merged commit a4efca8ee5 into main 2026-10-26 20:33:29 +11:00
benvin deleted branch benvin/artifactapi-auth-uploads 2026-10-26 20:33:30 +11:00
Sign in to join this conversation.
No Reviewers
No Label
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: unkin/argocd-apps#574