Labels Milestones New Pull Request

0 Open 147 Closed

Label

Show archived labels Use alt + click/enter to exclude labels

All labels No label

Milestone

All milestones No milestones

Project

All projects No project

Author

All users

Assignee

Assigned to nobody Assigned to anybody

benvin (BenVincent) unkin-agent (Unkin Agent) unkinben (Ben Vincent)

Sort

Newest Oldest Most recently updated Least recently updated Most commented Least commented Nearest due date Farthest due date

0 Open 147 Closed

Label

Clear labels

Milestone

No milestone

Projects

Clear projects

Assignee

Clear assignees

No assignee

benvin

unkin-agent

unkinben

Grant the vault deployer sudo to enable the oidc auth mount

#149 by unkin-agent was merged 2026-08-31 22:21:02 +10:00

master

benvin/sys-auth-oidc-grant

Grant the vault deployer auth/oidc and identity group capabilities

#148 by unkin-agent was merged 2026-08-30 22:14:43 +10:00

master

benvin/oidc-deployer-grants

Add Authentik OIDC SSO as the default human login for OpenBao

#147 by unkin-agent was merged 2026-08-30 22:38:05 +10:00

master

benvin/auth-oidc

1

Grant the vault deployer read on the Authentik OIDC client secret

#146 by unkin-agent was merged 2026-08-30 21:50:58 +10:00

master

benvin/oidc-client-read-grant

Bump vault-secrets-arrstack provider to 0.2.0 and plumb methods

#145 by unkin-agent was merged 2026-08-30 18:19:05 +10:00

master

benvin/arrstack-provider-0.2.0

Bump arrstack plugin catalog to v0.2.0

#144 by unkin-agent was merged 2026-08-30 17:07:29 +10:00

master

benvin/arrstack-plugin-sha-0.2.0

Grant terraform-rancher read on rancher/creds/ci

#143 by unkin-agent was merged 2026-08-30 09:42:00 +10:00

master

benvin/rancher-creds-ci-policy

Add ephemeral Gitea creds for repospawner

#142 by unkin-agent was merged 2026-08-30 09:29:26 +10:00

master

benvin/repospawner-gitea-creds

Add arrstack creds role and k8s auth for mediamark

#141 by unkin-agent was merged 2026-08-30 09:40:27 +10:00

master

benvin/mediamark-arrstack-role

Grant terraform-authentik write on the kv/service/authentik subtree

#140 by unkin-agent was merged 2026-08-29 23:01:43 +10:00

master

benvin/tf-authentik-kv-write

Grant agents approle read on kv/service/authentik/agent-api-token

#139 by unkin-agent was merged 2026-08-29 12:56:07 +10:00

master

benvin/agents-authentik-token

Revert temporary agents read grant on Authentik provider token

#138 by unkin-agent was merged 2026-08-25 21:35:57 +10:00

master

benvin/revert-agents-authentik-read

Grant agents AppRole read on the Authentik provider token

#137 by unkin-agent was merged 2026-08-23 22:34:32 +10:00

master

benvin/agents-authentik-read

Run plan without acquiring the Consul state lock

#136 by unkin-agent was merged 2026-08-23 22:31:58 +10:00

master

benvin/lockfree-plan

operator RO creds: read operator CRD API groups

#135 by unkin-agent was merged 2026-08-23 12:29:02 +10:00

master

benvin/operator-read-crds

Bump vault-secrets-arrstack provider to 0.1.1

#134 by unkin-agent was merged 2026-08-23 11:30:21 +10:00

master

benvin/arrstack-provider-0.1.1

Sort arrstack role apps alphabetically

#133 by unkin-agent was merged 2026-08-22 23:25:44 +10:00

master

benvin/arrstack-apps-sort

Allow CSI auth to read ceph-mediafs-secret KV

#132 by unkin-agent was merged 2026-08-22 23:17:18 +10:00

master

benvin/mediafs-csi-kv

Remove ghp agent role (missing installation_id; unblock apply)

#131 by unkin-agent was merged 2026-08-20 00:05:14 +10:00

master

benvin/remove-ghp-role-for-now

Restore ghp secret backend + roles (config now seeded)

#130 by unkin-agent was merged 2026-08-19 23:47:32 +10:00

master

benvin/add-ghp-backend-back