Revert temporary agents read grant on Authentik provider token #138

Merged
benvin merged 1 commits from benvin/revert-agents-authentik-read into master 2026-08-25 21:35:57 +10:00
Member

Why

The one-off terragrunt import in terraform-authentik that required this grant is complete (jellyfin provider, groups, application, and policy bindings are all reconciled into state; apply pipeline is green). Per the recovery plan the temporary read grant is removed again.

Changes

  • Reverts de9d6e5: removes policies/kv/service/terraform/authentik/read.yaml (agents AppRole read on kv/data/service/terraform/authentik)
## Why The one-off terragrunt import in terraform-authentik that required this grant is complete (jellyfin provider, groups, application, and policy bindings are all reconciled into state; apply pipeline is green). Per the recovery plan the temporary read grant is removed again. ## Changes - Reverts de9d6e5: removes policies/kv/service/terraform/authentik/read.yaml (agents AppRole read on kv/data/service/terraform/authentik)
unkin-agent added 1 commit 2026-08-23 22:46:11 +10:00
Revert "Grant agents AppRole read on the Authentik provider token"
ci/woodpecker/pr/plan Pipeline was successful
ci/woodpecker/pr/pre-commit Pipeline was successful
c59c369bee
This reverts commit de9d6e5fcc.
benvin merged commit 36d2b99255 into master 2026-08-25 21:35:57 +10:00
benvin deleted branch benvin/revert-agents-authentik-read 2026-08-25 21:35:58 +10:00
Sign in to join this conversation.
No Reviewers
No Label
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: unkin/terraform-vault#138