unkin-agent 72c4105c0f ci: authenticate artifactapi rpm upload with a vault token (#23)
artifactapi is about to enforce auth on file uploads (`ARTIFACTAPI_AUTH_UPLOADS`), and the release upload currently PUTs anonymously.

- mint an `artifactapi-writer` OIDC token via Vault k8s auth (role `woodpecker_artifactapi_writer`) using the step SA token
- fail the step if minting fails (`set -o pipefail`)
- send the token as `Authorization: Bearer` via a header file, never in argv or logs

Reviewed-on: #23
Co-authored-by: unkin-agent <unkin-agent@unkin.net>
Co-committed-by: unkin-agent <unkin-agent@unkin.net>
2026-10-25 23:08:58 +11:00
S
Description
A CLI tool written in Go that queries the PuppetDB API to look up and filter node facts.
342 KiB
v0.5.8 Latest
2026-10-13 21:04:18 +11:00
Languages
Go 94.1%
Makefile 3.6%
Shell 2.3%