diff --git a/policies/kv/kubernetes/namespace/logging/default/vlogs-oauth-credentials/read.yaml b/policies/kv/kubernetes/namespace/logging/default/vlogs-oauth-credentials/read.yaml deleted file mode 100644 index 02aba75..0000000 --- a/policies/kv/kubernetes/namespace/logging/default/vlogs-oauth-credentials/read.yaml +++ /dev/null @@ -1,14 +0,0 @@ -# Allow the Terraform Authentik runner to read the vlogs OIDC client secret. It is -# a second OIDC client in an already-onboarded namespace, so it cannot use the -# one-per-namespace oauth-credentials path. ---- -rules: - - path: "kv/data/kubernetes/namespace/logging/default/vlogs-oauth-credentials" - capabilities: - - read - -auth: - approle: - - terraform_authentik - k8s/au/syd1: - - woodpecker_terraform_authentik