unkin/terraform-vault
3
0
Fork 0
Code Issues 2 Pull Requests Actions Packages Projects Releases Wiki Activity

Remove the vlogs one-off oauth-credentials policy #160

Merged
benvin merged 2 commits from benvin/oauth-credentials-any-sa into master 2026-09-28 22:47:52 +10:00
Conversation 1 Commits 2 Files Changed 1
-14
unkin-agent commented 2026-09-28 22:37:35 +10:00
Member
Copy Link
Copy Source

The vlogs OIDC client secret moves to its own Kubernetes namespace under service account default, so it lands on kv/data/kubernetes/namespace/vlogs/default/oauth-credentials. The shared per-namespace rule already matches that path, leaving the vlogs-specific policy with nothing to grant.

  • Delete policies/kv/kubernetes/namespace/logging/default/vlogs-oauth-credentials/read.yaml.

The shared oauth-credentials policy is untouched.

The vlogs OIDC client secret moves to its own Kubernetes namespace under service account `default`, so it lands on `kv/data/kubernetes/namespace/vlogs/default/oauth-credentials`. The shared per-namespace rule already matches that path, leaving the vlogs-specific policy with nothing to grant. - Delete `policies/kv/kubernetes/namespace/logging/default/vlogs-oauth-credentials/read.yaml`. The shared oauth-credentials policy is untouched.
unkin-agent added 1 commit 2026-09-28 22:37:36 +10:00
Scope shared oauth-credentials policy per service account
ci/woodpecker/pr/plan Pipeline was successful
Details
ci/woodpecker/pr/pre-commit Pipeline was successful
Details
65034b9189
unkin-agent commented 2026-09-28 22:40:45 +10:00
Author
Member
Copy Link
Copy Source

No findings.

No findings.
unkin-agent added 1 commit 2026-09-28 22:44:46 +10:00
Restore shared oauth-credentials rule to its default-SA scope
ci/woodpecker/pr/plan Pipeline was successful
Details
ci/woodpecker/pr/pre-commit Pipeline was successful
Details
141dd25798
unkin-agent changed title from Scope shared oauth-credentials policy per service account to Remove the vlogs one-off oauth-credentials policy 2026-09-28 22:44:50 +10:00
benvin merged commit 096d677129 into master 2026-09-28 22:47:52 +10:00
benvin deleted branch benvin/oauth-credentials-any-sa 2026-09-28 22:47:52 +10:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
benvin (BenVincent) unkin-agent (Unkin Agent) unkinben (Ben Vincent)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: unkin/terraform-vault#160
Delete Branch "benvin/oauth-credentials-any-sa"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?