2026-09-28 22:47:52 +10:00
1 changed files with 0 additions and 14 deletions
@@ -1,14 +0,0 @@
-# Allow the Terraform Authentik runner to read the vlogs OIDC client secret. It is
-# a second OIDC client in an already-onboarded namespace, so it cannot use the
-# one-per-namespace oauth-credentials path.
---
-rules:
-  - path: "kv/data/kubernetes/namespace/logging/default/vlogs-oauth-credentials"
-    capabilities:
-      - read
-
-auth:
-  approle:
-    - terraform_authentik
-  k8s/au/syd1:
-    - woodpecker_terraform_authentik