Read the vlogs client secret from the vlogs namespace path #41

2026-09-28T22:53:13+10:00

unkin-agent commented

2026-09-28 22:53:13 +10:00

vlogs moves to its own vlogs namespace (ServiceAccount default), so its Vault KV credential moves with it under the kubernetes/namespace/<ns>/<sa>/<secret> layout.

Point client_secret_vault.path at kubernetes/namespace/vlogs/default/oauth-credentials.
Correct the namespace named in the file comment.

The secret is already seeded there with identical values, and the new path falls under the existing terraform-vault grant for kv/data/kubernetes/namespace/+/default/oauth-credentials — the old vlogs-oauth-credentials name did not.

Client ID, launch URL and redirect URIs are unchanged.

vlogs moves to its own `vlogs` namespace (ServiceAccount `default`), so its Vault KV credential moves with it under the `kubernetes/namespace/<ns>/<sa>/<secret>` layout. - Point `client_secret_vault.path` at `kubernetes/namespace/vlogs/default/oauth-credentials`. - Correct the namespace named in the file comment. The secret is already seeded there with identical values, and the new path falls under the existing terraform-vault grant for `kv/data/kubernetes/namespace/+/default/oauth-credentials` — the old `vlogs-oauth-credentials` name did not. Client ID, launch URL and redirect URIs are unchanged.

unkin-agent added 1 commit 2026-09-28 22:53:14 +10:00

Read the vlogs client secret from the vlogs namespace path

ci/woodpecker/pr/pre-commit Pipeline was successful

Details

ci/woodpecker/pr/plan Pipeline was successful

Details

89a5caf353

benvin merged commit 0c6145e057 into main

2026-09-28 22:55:51 +10:00

benvin deleted branch benvin/vlogs-namespace-move

2026-09-28 22:55:52 +10:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: unkin/terraform-authentik#41