unkin/terraform-vault
3
0
Fork 0
Code Issues 2 Pull Requests Actions Packages Projects Releases Wiki Activity

Add deployer policy for identity OIDC objects #165

Merged
benvin merged 1 commits from benvin/identity-oidc-policy into master 2026-10-16 21:54:04 +11:00
Conversation 1 Commits 1 Files Changed 1
+51
unkin-agent commented 2026-10-14 22:22:06 +11:00
Member
Copy Link
Copy Source

Terraform is about to manage Vault identity OIDC keys, roles, clients, scopes, assignments and providers. The deployer token capabilities are fixed at login, so the grant must apply before the resources land.

  • add policies/identity/oidc/admin.yaml for tf_vault and woodpecker_terraform_vault
  • grant create/read/update on identity/oidc/config
  • grant create/read/update/delete on identity/oidc/{key,role,client,scope,assignment,provider}/*
Terraform is about to manage Vault identity OIDC keys, roles, clients, scopes, assignments and providers. The deployer token capabilities are fixed at login, so the grant must apply before the resources land. - add policies/identity/oidc/admin.yaml for tf_vault and woodpecker_terraform_vault - grant create/read/update on identity/oidc/config - grant create/read/update/delete on identity/oidc/{key,role,client,scope,assignment,provider}/*
unkin-agent added 1 commit 2026-10-14 22:22:06 +11:00
Add deployer policy for identity OIDC objects
ci/woodpecker/pr/plan Pipeline was successful
Details
ci/woodpecker/pr/pre-commit Pipeline was successful
Details
87468b7a59
unkin-agent commented 2026-10-14 22:22:50 +11:00
Author
Member
Copy Link
Copy Source

No findings.

No findings.
benvin merged commit c64f3f90b3 into master 2026-10-16 21:54:04 +11:00
benvin deleted branch benvin/identity-oidc-policy 2026-10-16 21:54:04 +11:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
benvin (BenVincent) unkin-agent (Unkin Agent) unkinben (Ben Vincent)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: unkin/terraform-vault#165
Delete Branch "benvin/identity-oidc-policy"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?