unkin/repospawner
4
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Disable API token automount on spawned job pods #2

Merged
benvin merged 1 commits from benvin/job-no-automount into main 2026-08-30 16:05:38 +10:00
Conversation 0 Commits 1 Files Changed 2
+7

1 Commits

Author SHA1 Message Date
unkin-agent 6aec05deae Disable API token automount on spawned job pods
ci/woodpecker/pr/build Pipeline was successful
Details
ci/woodpecker/pr/test Pipeline was successful
Details
ci/woodpecker/pr/pre-commit Pipeline was successful
Details 
Job pods only need the vault-audience projected token to log in; the
default automounted ServiceAccount token hands them the repospawner
Role's k8s API access that no job subcommand uses.
 2026-08-30 15:32:49 +10:00