Revert "Grant agents AppRole read on the Authentik provider token"
ci/woodpecker/pr/plan Pipeline was successful
ci/woodpecker/pr/pre-commit Pipeline was successful

This reverts commit de9d6e5fcc.
This commit is contained in:
2026-08-23 22:45:42 +10:00
parent 9fcd9d7ab5
commit c59c369bee
@@ -1,14 +0,0 @@
# Lets the agents AppRole read the Authentik provider API token so a coding
# agent can run a one-off `terragrunt import` in terraform-authentik to
# reconcile resources orphaned by the failed jellyfin apply. Read-only on the
# single token path; revert once the import is done. Mirrors the
# gitea/creds/unkin-agent binding pattern.
---
rules:
- path: "kv/data/service/terraform/authentik"
capabilities:
- read
auth:
approle:
- agents