From c59c369bee841f48d934af349db97e5425f0b25e Mon Sep 17 00:00:00 2001 From: unkin-agent Date: Sun, 23 Aug 2026 22:45:42 +1000 Subject: [PATCH] Revert "Grant agents AppRole read on the Authentik provider token" This reverts commit de9d6e5fcc6df9e95b8050570396576419ea6d8a. --- policies/kv/service/terraform/authentik/read.yaml | 14 -------------- 1 file changed, 14 deletions(-) delete mode 100644 policies/kv/service/terraform/authentik/read.yaml diff --git a/policies/kv/service/terraform/authentik/read.yaml b/policies/kv/service/terraform/authentik/read.yaml deleted file mode 100644 index 655de85..0000000 --- a/policies/kv/service/terraform/authentik/read.yaml +++ /dev/null @@ -1,14 +0,0 @@ -# Lets the agents AppRole read the Authentik provider API token so a coding -# agent can run a one-off `terragrunt import` in terraform-authentik to -# reconcile resources orphaned by the failed jellyfin apply. Read-only on the -# single token path; revert once the import is done. Mirrors the -# gitea/creds/unkin-agent binding pattern. ---- -rules: - - path: "kv/data/service/terraform/authentik" - capabilities: - - read - -auth: - approle: - - agents -- 2.47.3