unkin/terraform-vault
3
0
Fork 0
Code Issues 2 Pull Requests Actions Packages Projects Releases Wiki Activity

Add arrstack creds role and k8s auth for mediamark #141

Merged
benvin merged 1 commits from benvin/mediamark-arrstack-role into master 2026-08-30 09:40:27 +10:00
Conversation 0 Commits 1 Files Changed 3
+39

1 Commits

Author SHA1 Message Date
unkin-agent 94c8811251 Add arrstack creds role and k8s auth for mediamark
ci/woodpecker/pr/plan Pipeline was successful
Details
ci/woodpecker/pr/pre-commit Pipeline was successful
Details 
mediamark should consume ephemeral virtual sonarr/radarr keys from the
arrstack engine instead of copies of the static app API keys.

- add arrstack role "mediamark" scoped to sonarr + radarr (60s ttl, 24h
  max_ttl, mirroring the existing per-app roles)
- add k8s/au/syd1 auth role "mediamark" bound to serviceaccount default in
  namespace mediamark
- grant read on arrstack/creds/mediamark to that role only
 2026-08-30 00:08:46 +10:00