unkin/terraform-vault
3
0
Fork 0
Code Issues 2 Pull Requests 1 Actions Packages Projects Releases Wiki Activity

Let terraform-authentik read the vlogs OIDC client secret #157

Merged
benvin merged 1 commits from benvin/authentik-vlogs-secret-read into master 2026-09-27 10:35:05 +10:00
Conversation 0 Commits 1 Files Changed 1
+5
unkin-agent commented 2026-09-27 10:18:28 +10:00
Member
Copy Link
Copy Source

vlogs is the first app needing a second OIDC secret in a namespace that already has one, so the one-per-namespace oauth-credentials wildcard does not cover it and the terraform-authentik plan fails on a denied kv read.

  • grant the runner read on kv/kubernetes/namespace/logging/default/vlogs-oauth-credentials

Unblocks terraform-authentik #40.

vlogs is the first app needing a second OIDC secret in a namespace that already has one, so the one-per-namespace `oauth-credentials` wildcard does not cover it and the terraform-authentik plan fails on a denied kv read. - grant the runner read on `kv/kubernetes/namespace/logging/default/vlogs-oauth-credentials` Unblocks terraform-authentik #40.
unkin-agent added 1 commit 2026-09-27 10:18:29 +10:00
Let terraform-authentik read the vlogs OIDC client secret
ci/woodpecker/pr/plan Pipeline was successful
Details
ci/woodpecker/pr/pre-commit Pipeline was successful
Details
7817c3531a 
vlogs is the first app to need a second OIDC secret in a namespace that
already has one, so the one-per-namespace oauth-credentials wildcard does
not cover it and the authentik plan fails on a denied kv read.

- grant read on kv/kubernetes/namespace/logging/default/vlogs-oauth-credentials
benvin merged commit 563b2164c7 into master 2026-09-27 10:35:05 +10:00
benvin deleted branch benvin/authentik-vlogs-secret-read 2026-09-27 10:35:06 +10:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
benvin (BenVincent) unkin-agent (Unkin Agent) unkinben (Ben Vincent)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: unkin/terraform-vault#157
Delete Branch "benvin/authentik-vlogs-secret-read"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?