From 546a9efe4475fc386c4e4b3634d2600cdce793ca Mon Sep 17 00:00:00 2001 From: Ben Vincent Date: Sat, 7 Mar 2026 11:31:36 +1100 Subject: [PATCH] fix: update audience for rpmbuilder when using using the service account jwt directly, the default audience is the api servers url --- config/auth_kubernetes_role/k8s/au/syd1/rpmbuilder.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/config/auth_kubernetes_role/k8s/au/syd1/rpmbuilder.yaml b/config/auth_kubernetes_role/k8s/au/syd1/rpmbuilder.yaml index 5e5889a..599f446 100644 --- a/config/auth_kubernetes_role/k8s/au/syd1/rpmbuilder.yaml +++ b/config/auth_kubernetes_role/k8s/au/syd1/rpmbuilder.yaml @@ -5,4 +5,4 @@ bound_service_account_namespaces: - woodpecker token_ttl: 600 token_max_ttl: 600 -audience: vault +audience: https://kubernetes.default.svc.cluster.local