unkin/terraform-vault
3
0
Fork 0
Code Issues 2 Pull Requests Actions Packages Projects Releases Wiki Activity

Grant agents AppRole read on the Authentik provider token #137

Merged
benvin merged 1 commits from benvin/agents-authentik-read into master 2026-08-23 22:34:32 +10:00
Conversation 0 Commits 1 Files Changed 1
+14

1 Commits

Author SHA1 Message Date
unkin-agent de9d6e5fcc Grant agents AppRole read on the Authentik provider token
ci/woodpecker/pr/plan Pipeline was successful
Details
ci/woodpecker/pr/pre-commit Pipeline was successful
Details 
A one-off terragrunt import in terraform-authentik is needed to reconcile
resources orphaned by the failed jellyfin apply, and the agents role must
read the Authentik provider token to run it. Revertable after the import.

- Add kv/service/terraform/authentik/read policy (read on
  kv/data/service/terraform/authentik) bound to the agents AppRole
 2026-08-23 22:31:13 +10:00