ci: mint rancher token from the vault rancher engine #9

Merged
benvin merged 1 commits from benvin/ephemeral-runner-creds into main 2026-08-30 14:27:33 +10:00

1 Commits

Author SHA1 Message Date
unkin-agent 6db8100aba ci: mint rancher token from the vault rancher engine
ci/woodpecker/pr/pre-commit Pipeline was successful
ci/woodpecker/pr/plan Pipeline was successful
Retire the static 90-day admin token in kv/service/terraform/rancher; the
vault rancher engine and the read grant on rancher/creds/ci are live.

- Makefile: vault_env reads TF_VAR_rancher_token from rancher/creds/ci
- README: document the ephemeral 1h credential model
2026-08-30 14:12:23 +10:00